CVE-2014-8104
Fixed in a distro release EPSS 3%
OpenVPN 2.x before 2.0.11, 2.1.x, 2.2.x before 2.2.3, and 2.3.x before 2.3.6 allows remote authenticated users to cause a denial of service (server crash) via a small control channel packet.
Products: mageia, debian_linux, opensuse, openvpn, openvpn_access_server, canonical ubuntu_linux
Distro releases
| Release | Package | Fixed in |
|---|---|---|
| Debian 12 | openvpn | 2.3.4-5 |
| Debian 13 | openvpn | 2.3.4-5 |
| Debian 14 | openvpn | 2.3.4-5 |
| Debian 6.0 | openvpn | 2.1.3-2+squeeze3 |
| Debian 7 | openvpn | 2.2.1-8+deb7u3 |
| Ubuntu 14.04 LTS | openvpn | 2.3.2-7ubuntu3.1 |
| openSUSE Tumbleweed | openvpn | 2.3.11-3.1 |