CVE-2021-4234

No fix known EPSS <1%

OpenVPN Access Server 2.10 and prior versions are susceptible to resending multiple packets in a response to a reset packet sent from the client which the client again does not respond to, resulting in a limited amplification attack.

Published 2022-07-06 · CVE record · OSV

Products: openvpn_access_server