Remote Denial-of-Service Vulnerability in OpenVPN Products

CVE-2017-7521

What is CVE-2017-7521?

Versions of OpenVPN prior to 2.4.3 and 2.3.17 are susceptible to a remote denial-of-service attack stemming from memory leaks and issues related to double-free errors in the extract_x509_extension() function. An attacker can exploit this vulnerability, leading to memory exhaustion, which can disrupt service availability.

References