CVE-2014-8104 in OpenVPN
Summary
OpenVPN 2.x before 2.0.11, 2.1.x, 2.2.x before 2.2.3, and 2.3.x before 2.3.6 allows remote authenticated users to cause a denial of service (server crash) via a small control channel packet.
Reservation
10/10/2014
Disclosure
12/03/2014
Entries
VulDB provides additional information and datapoints for this CVE:
| ID | Vulnerability | CWE | Exp | Cou | CVE |
|---|---|---|---|---|---|
| 68315 | OpenVPN Control Channel Packet resource management | 399 | Proof-of-Concept | Official fix | CVE-2014-8104 |