description: OpenVPN version 2.3.12 and newer is vulnerable to unauthenticated Denial of Service of server via received large control packet. Note that this issue is fixed in 2.3.15 and 2.4.2.
problem types: CWE-617
affected:
{
product: openvpn
vendor: OpenVPN Technologies, Inc
versions:
status: affected, version: 2.3.12 and newer
}