CVE-2014-8104
CVE-2014-8104
This page contains facts from public vulnerability sources. Check the original advisory before updating.
OpenVPN 2.x before 2.0.11, 2.1.x, 2.2.x before 2.2.3, and 2.3.x before 2.3.6 allows remote authenticated users to cause a denial of service (server crash) via a small control channel packet.
EPSS 3.5% · Fix available
- Published
- Updated
Stack: system
Affected products and versions
n/a
- Versions
- n/a: Affected
No fix published
openvpn Debian:12
- Affected ranges
- ECOSYSTEM: < 2.3.4-5
Update to 2.3.4-5
openvpn Debian:13
- Affected ranges
- ECOSYSTEM: < 2.3.4-5
Update to 2.3.4-5
openvpn Debian:14
- Affected ranges
- ECOSYSTEM: < 2.3.4-5
Update to 2.3.4-5
openvpn Ubuntu:14.04:LTS
- Versions
- 2.3.2-4ubuntu1
- 2.3.2-5ubuntu1
- 2.3.2-7ubuntu1
- 2.3.2-7ubuntu2
- 2.3.2-7ubuntu3
- Affected ranges
- ECOSYSTEM: < 2.3.2-7ubuntu3.1
Update to 2.3.2-7ubuntu3.1
Original sources
- http://www.mandriva.com/security/advisories?name=MDVSA-2015:139
- http://advisories.mageia.org/MGASA-2014-0512.html
- http://www.ubuntu.com/usn/USN-2430-1
- http://www.debian.org/security/2014/dsa-3084
- https://community.openvpn.net/openvpn/wiki/SecurityAnnouncement-97597e732b
- http://lists.opensuse.org/opensuse-security-announce/2014-12/msg00008.html
- https://nvd.nist.gov/vuln/detail/CVE-2014-8104