| Package | Affected versions | Patched versions |
|---|---|---|
| openvpn | = 2.0= 2.0.1_rc1= 2.0.1_rc2= 2.0.1_rc3= 2.0.1_rc4= 2.0.1_rc5= 2.0.1_rc6= 2.0.1_rc7= 2.0_beta1= 2.0_beta10= 2.0_beta11= 2.0_beta12= 2.0_beta13= 2.0_beta15= 2.0_beta16= 2.0_beta17= 2.0_beta18= 2.0_beta19= 2.0_beta2= 2.0_beta20= 2.0_beta28= 2.0_beta3= 2.0_beta4= 2.0_beta5= 2.0_beta6= 2.0_beta7= 2.0_beta8= 2.0_beta9= 2.0_rc1= 2.0_rc10= 2.0_rc11= 2.0_rc12= 2.0_rc13= 2.0_rc14= 2.0_rc15= 2.0_rc16= 2.0_rc17= 2.0_rc18= 2.0_rc19= 2.0_rc2= 2.0_rc20= 2.0_rc21= 2.0_rc3= 2.0_rc4= 2.0_rc5= 2.0_rc6= 2.0_rc7= 2.0_rc8= 2.0_rc9= 2.0_test1= 2.0_test10= 2.0_test11= 2.0_test12= 2.0_test14= 2.0_test15= 2.0_test16= 2.0_test17= 2.0_test18= 2.0_test19= 2.0_test2= 2.0_test20= 2.0_test21= 2.0_test22= 2.0_test23= 2.0_test24= 2.0_test26= 2.0_test27= 2.0_test29= 2.0_test3= 2.0_test5= 2.0_test6= 2.0_test7= 2.0_test8= 2.0_test9 |
OpenVPN before 2.0.1, when running with "verb 0" and without TLS authentication, does not properly flush the OpenSSL error queue when a client fails certificate authentication to the server and causes the error to be processed by the wrong client, which allows remote attackers to cause a denial of service (client disconnection) via a large number of failed authentication attempts.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free