CVE-2014-8104 OpenVPN 2.x before 2.0.11, 2.1.x, 2.2.x before 2.2.3, and 2.3.x before 2.3.6 allows remote authenticated users to cause a denial of service (server crash) via a small control channel packet.
MediumCVSS 6.8
EPSS 3.5%
- Published
- Updated
- Exploit status
- No public exploit known
Description
OpenVPN 2.x before 2.0.11, 2.1.x, 2.2.x before 2.2.3, and 2.3.x before 2.3.6 allows remote authenticated users to cause a denial of service (server crash) via a small control channel packet.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| debian/openvpn(Debian:12) | < 2.3.4-5 | 2.3.4-5 |
| debian/openvpn(Debian:13) | < 2.3.4-5 | 2.3.4-5 |
| debian/openvpn(Debian:14) | < 2.3.4-5 | 2.3.4-5 |
| mageia | = 4.0 | No fix listed |
| debian linux | = 7.0 | No fix listed |
| debian linux | = 8.0 | No fix listed |
| opensuse | = 12.3 | No fix listed |
| opensuse | = 13.1 | No fix listed |
| opensuse | = 13.2 | No fix listed |
| OpenVPN | = 2.0.1_rc1 | No fix listed |
| OpenVPN | = 2.0.1_rc2 | No fix listed |
| OpenVPN | = 2.0.1_rc3 | No fix listed |
| OpenVPN | = 2.0.1_rc4 | No fix listed |
| OpenVPN | = 2.0.1_rc5 | No fix listed |
| OpenVPN | = 2.0.1_rc6 | No fix listed |
| OpenVPN | = 2.0.1_rc7 | No fix listed |
| OpenVPN | = 2.0.2_rc1 | No fix listed |
| OpenVPN | = 2.0.3_rc1 | No fix listed |
| OpenVPN | = 2.0.4 | No fix listed |
| OpenVPN | = 2.0.6_rc1 | No fix listed |
| OpenVPN | = 2.0.9 | No fix listed |
| OpenVPN | = 2.0_rc1 | No fix listed |
| OpenVPN | = 2.0_rc2 | No fix listed |
| OpenVPN | = 2.0_rc3 | No fix listed |
| OpenVPN | = 2.0_rc4 | No fix listed |
Show 120 more
| Product | Affected versions | Fixed in |
|---|---|---|
| OpenVPN | = 2.0_rc5 | No fix listed |
| OpenVPN | = 2.0_rc6 | No fix listed |
| OpenVPN | = 2.0_rc7 | No fix listed |
| OpenVPN | = 2.0_rc8 | No fix listed |
| OpenVPN | = 2.0_rc9 | No fix listed |
| OpenVPN | = 2.0_rc10 | No fix listed |
| OpenVPN | = 2.0_rc11 | No fix listed |
| OpenVPN | = 2.0_rc12 | No fix listed |
| OpenVPN | = 2.0_rc13 | No fix listed |
| OpenVPN | = 2.0_rc14 | No fix listed |
| OpenVPN | = 2.0_rc15 | No fix listed |
| OpenVPN | = 2.0_rc16 | No fix listed |
| OpenVPN | = 2.0_rc17 | No fix listed |
| OpenVPN | = 2.0_rc18 | No fix listed |
| OpenVPN | = 2.0_rc19 | No fix listed |
| OpenVPN | = 2.0_rc20 | No fix listed |
| OpenVPN | = 2.0_rc21 | No fix listed |
| OpenVPN | = 2.0_test1 | No fix listed |
| OpenVPN | = 2.0_test2 | No fix listed |
| OpenVPN | = 2.0_test3 | No fix listed |
| OpenVPN | = 2.0_test4 | No fix listed |
| OpenVPN | = 2.0_test5 | No fix listed |
| OpenVPN | = 2.0_test6 | No fix listed |
| OpenVPN | = 2.0_test7 | No fix listed |
| OpenVPN | = 2.0_test8 | No fix listed |
| OpenVPN | = 2.0_test9 | No fix listed |
| OpenVPN | = 2.0_test10 | No fix listed |
| OpenVPN | = 2.0_test11 | No fix listed |
| OpenVPN | = 2.0_test12 | No fix listed |
| OpenVPN | = 2.0_test14 | No fix listed |
| OpenVPN | = 2.0_test15 | No fix listed |
| OpenVPN | = 2.0_test16 | No fix listed |
| OpenVPN | = 2.0_test17 | No fix listed |
| OpenVPN | = 2.0_test18 | No fix listed |
| OpenVPN | = 2.0_test19 | No fix listed |
| OpenVPN | = 2.0_test20 | No fix listed |
| OpenVPN | = 2.0_test21 | No fix listed |
| OpenVPN | = 2.0_test22 | No fix listed |
| OpenVPN | = 2.0_test23 | No fix listed |
| OpenVPN | = 2.0_test24 | No fix listed |
| OpenVPN | = 2.0_test25 | No fix listed |
| OpenVPN | = 2.0_test26 | No fix listed |
| OpenVPN | = 2.0_test27 | No fix listed |
| OpenVPN | = 2.0_test28 | No fix listed |
| OpenVPN | = 2.0_test29 | No fix listed |
| OpenVPN | = 2.1-beta-1 | No fix listed |
| OpenVPN | = 2.1-beta-10 | No fix listed |
| OpenVPN | = 2.1-beta-11 | No fix listed |
| OpenVPN | = 2.1-beta-12 | No fix listed |
| OpenVPN | = 2.1-beta-13 | No fix listed |
| OpenVPN | = 2.1-beta-14 | No fix listed |
| OpenVPN | = 2.1-beta-15 | No fix listed |
| OpenVPN | = 2.1-beta-16 | No fix listed |
| OpenVPN | = 2.1-beta-2 | No fix listed |
| OpenVPN | = 2.1-beta-3 | No fix listed |
| OpenVPN | = 2.1-beta-4 | No fix listed |
| OpenVPN | = 2.1-beta-5 | No fix listed |
| OpenVPN | = 2.1-beta-6 | No fix listed |
| OpenVPN | = 2.1-beta-7 | No fix listed |
| OpenVPN | = 2.1-beta-8 | No fix listed |
| OpenVPN | = 2.1-beta-9 | No fix listed |
| OpenVPN | = 2.1-rc_1 | No fix listed |
| OpenVPN | = 2.1-rc_10 | No fix listed |
| OpenVPN | = 2.1-rc_11 | No fix listed |
| OpenVPN | = 2.1-rc_12 | No fix listed |
| OpenVPN | = 2.1-rc_13 | No fix listed |
| OpenVPN | = 2.1-rc_14 | No fix listed |
| OpenVPN | = 2.1-rc_15 | No fix listed |
| OpenVPN | = 2.1-rc_16 | No fix listed |
| OpenVPN | = 2.1-rc_17 | No fix listed |
| OpenVPN | = 2.1-rc_18 | No fix listed |
| OpenVPN | = 2.1-rc_19 | No fix listed |
| OpenVPN | = 2.1-rc_2 | No fix listed |
| OpenVPN | = 2.1-rc_20 | No fix listed |
| OpenVPN | = 2.1-rc_21 | No fix listed |
| OpenVPN | = 2.1-rc_22 | No fix listed |
| OpenVPN | = 2.1-rc_3 | No fix listed |
| OpenVPN | = 2.1-rc_4 | No fix listed |
| OpenVPN | = 2.1-rc_5 | No fix listed |
| OpenVPN | = 2.1-rc_6 | No fix listed |
| OpenVPN | = 2.1-rc_7 | No fix listed |
| OpenVPN | = 2.1-rc_8 | No fix listed |
| OpenVPN | = 2.1-rc_9 | No fix listed |
| OpenVPN | = 2.1.0 | No fix listed |
| OpenVPN | = 2.1.1 | No fix listed |
| OpenVPN | = 2.1.2 | No fix listed |
| OpenVPN | = 2.1.3 | No fix listed |
| OpenVPN | = 2.1.4 | No fix listed |
| OpenVPN | = 2.2-beta1 | No fix listed |
| OpenVPN | = 2.2-beta2 | No fix listed |
| OpenVPN | = 2.2-beta3 | No fix listed |
| OpenVPN | = 2.2-beta4 | No fix listed |
| OpenVPN | = 2.2-beta5 | No fix listed |
| OpenVPN | = 2.2.0 | No fix listed |
| OpenVPN | = 2.2.1 | No fix listed |
| OpenVPN | = 2.2.2 | No fix listed |
| OpenVPN | = 2.3-alpha1 | No fix listed |
| OpenVPN | = 2.3-alpha2 | No fix listed |
| OpenVPN | = 2.3-alpha3 | No fix listed |
| OpenVPN | = 2.3-beta1 | No fix listed |
| OpenVPN | = 2.3-rc1 | No fix listed |
| OpenVPN | = 2.3-rc2 | No fix listed |
| OpenVPN | = 2.3.0 | No fix listed |
| OpenVPN | = 2.3.1 | No fix listed |
| OpenVPN | = 2.3.2 | No fix listed |
| OpenVPN | = 2.3.3 | No fix listed |
| OpenVPN | = 2.3.4 | No fix listed |
| OpenVPN | = 2.3.5 | No fix listed |
| openvpn access server | = 2.0.0 | No fix listed |
| openvpn access server | = 2.0.1 | No fix listed |
| openvpn access server | = 2.0.2 | No fix listed |
| openvpn access server | = 2.0.3 | No fix listed |
| openvpn access server | = 2.0.5 | No fix listed |
| openvpn access server | = 2.0.6 | No fix listed |
| openvpn access server | = 2.0.7 | No fix listed |
| openvpn access server | = 2.0.8 | No fix listed |
| openvpn access server | = 2.0.10 | No fix listed |
| Canonical Ubuntu Linux | = 12.04 | No fix listed |
| Canonical Ubuntu Linux | = 14.04 | No fix listed |
| Canonical Ubuntu Linux | = 14.10 | No fix listed |
References
- Debian Security Tracker CVE-2014-8104 vendor-advisory
- advisories.mageia.org third-party-advisory
- openSUSE-SU-2014:1594 third-party-advisory vendor-advisory
- DSA-3084 third-party-advisory vendor-advisory
- MDVSA-2015:139 broken-link vendor-advisory
- USN-2430-1 third-party-advisory vendor-advisory
- community.openvpn.net vendor-advisory