Skip to content
fr Sign in
Not rated

CVE-2021-4234 OpenVPN Access Server 2.10 and prior versions are susceptible to resending multiple packets in a response to a reset…

Description

OpenVPN Access Server 2.10 and prior versions are susceptible to resending multiple packets in a response to a reset packet sent from the client which the client again does not respond to, resulting in a limited amplification attack.

Affected products and versions

Product Affected versions Fixed in
OpenVPN Access Server Versions not published

References

Timeline

  1. Published
  2. Last modified

Other CVEs of OpenVPN Access Server

The 7 CVEs of OpenVPN Access Server →
CVE-2022-33738 OpenVPN Access Server before 2.11 uses a weak random generator used to create user session token for the web portal Not rated CVE-2022-33737 The OpenVPN Access Server installer creates a log file readable for everyone, which from version 2.10.0 and before… Not rated CVE-2021-3824 OpenVPN Access Server 2.9.0 through 2.9.4 allow remote attackers to inject arbitrary web script or HTML via the web… Not rated CVE-2020-36382 OpenVPN Access Server 2.7.3 to 2.8.7 allows remote attackers to trigger an assert during the user authentication phase… Not rated
Track this CVE