Skip to content
OpenAdvisories
Unscored DSA-851-1 4 CVEs

openvpn - denial of service

Published Oct 8, 2005 · Updated Mar 9, 2026

Fixed packages 1

ReleasePackageFixed in
Debian · 3.1 openvpn 2.0-1sarge1

Vulnerabilities 4

  • Unscored —

    OpenVPN before 2.0.1, when running with "verb 0" and without TLS authentication, does not properly flush the OpenSSL er…

  • Unscored —

    OpenVPN before 2.0.1 does not properly flush the OpenSSL error queue when a packet can not be decrypted by the server, …

  • Unscored —

    OpenVPN before 2.0.1, when running in "dev tap" Ethernet bridging mode, allows remote authenticated clients to cause a …

  • Unscored —

    Race condition in OpenVPN before 2.0.1, when --duplicate-cn is not enabled, allows remote attackers to cause a denial o…