CVE-2005-3409

Fixed in a distro release EPSS 2%

OpenVPN 2.x before 2.0.4, when running in TCP mode, allows remote attackers to cause a denial of service (segmentation fault) by forcing the accept function call to return an error status, which leads to a null dereference in an exception handler.

Published 2005-11-02 · CVE record · OSV

Products: openvpn, openvpn_access_server

Distro releases