description: OpenVPN Access Server 2.10 and prior versions are susceptible to resending multiple packets in a response to a reset packet sent from the client which the client again does not respond to, resulting in a limited amplification attack.
problem types: CWE-406: Insufficient Control of Network Message Volume
affected:
{
product: OpenVPN Access Server
vendor: n/a
versions:
status: affected, version: 2.10 and prior version
}