← back
CVE-2017-7478

CVE-2017-7478

EPSS 13.9%CWE-617
OpenVPN version 2.3.12 and newer is vulnerable to unauthenticated Denial of Service of server via received large control packet. Note that this issue is fixed in 2.3.15 and 2.4.2.
Affected products
OpenVPN Technologies, Inc · openvpn
public PoCs found — 2
cve_referencewww.exploit-db.com/exploits/41993/unverifiedexploitdbwww.exploit-db.com/exploits/41993unverified
⚠ Public resources, to assess the exposure of systems you control or are authorized to test. Test only with authorization.

Want to know if your infrastructure is exposed to this?

Talk to TrueHacking →
References
https://community.openvpn.net/openvpn/wiki/QuarkslabAndCryptographyEngineerAuditshttps://www.exploit-db.com/exploits/41993/http://www.securityfocus.com/bid/98444http://www.securitytracker.com/id/1038473