Description

OpenVPN 2.x before 2.0.11, 2.1.x, 2.2.x before 2.2.3, and 2.3.x before 2.3.6 allows remote authenticated users to cause a denial of service (server crash) via a small control channel packet.

Remediation

References

CVE-2014-8104

Related Vulnerabilities

Apache Traffic Server Allocation of Resources Without Limits or Throttling Vulnerability (CVE-2019-9516)

WordPress Plugin Shortcoder-Create Shortcodes for Anything Security Bypass (6.3)

WordPress Plugin WP Hotel Booking PHP Object Injection (1.10.3)

PHP Permissions, Privileges, and Access Controls Vulnerability (CVE-2014-0185)

Grafana Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2022-21702)

Severity

Medium

Classification

CVE-2014-8104

Tags

Missing Update Known Vulnerabilities