description: OpenVPN versions before 2.4.3 and before 2.3.17 are vulnerable to denial-of-service by authenticated remote attacker via sending a certificate with an embedded NULL character.
problem types: CWE-20
affected:
{
product: OpenVPN
vendor: OpenVPN Technologies, Inc
versions:
status: affected, version: before 2.4.3
status: affected, version: before 2.3.17
}