Denial-of-Service Vulnerability in OpenVPN by OpenVPN Technologies

CVE-2017-7520

What is CVE-2017-7520?

OpenVPN versions prior to 2.4.3 and 2.3.17 are susceptible to a denial-of-service attack which may be exploited by a man-in-the-middle attacker. This vulnerability can lead to service outages and potentially allows unauthorized access to sensitive information stored in memory. Users are encouraged to upgrade to the latest versions to mitigate any risks associated with this security flaw.

References