p PatchFirst

CVE-2005-2532

CVE-2005-2532

This page contains facts from public vulnerability sources. Check the original advisory before updating.

OpenVPN before 2.0.1 does not properly flush the OpenSSL error queue when a packet can not be decrypted by the server, which allows remote authenticated attackers to cause a denial of service (client disconnection) via a large number of packets that can not be decrypted.

EPSS 2.7% · Fix available

Published
Updated

Stack: system

Affected products and versions

  • n/a

    Versions
    • n/a: Affected

    No fix published

  • openvpn Debian:12

    Affected ranges
    • ECOSYSTEM: < 2.0.2-1

    Update to 2.0.2-1

  • openvpn Debian:13

    Affected ranges
    • ECOSYSTEM: < 2.0.2-1

    Update to 2.0.2-1

  • openvpn Debian:14

    Affected ranges
    • ECOSYSTEM: < 2.0.2-1

    Update to 2.0.2-1

Original sources

Check your server →