CVE-2017-7478 Vulnerability Details

  /     /     /  

CVE-2017-7478 Metadata Quick Info

CVE Published: 15/05/2017 | CVE Updated: 05/08/2024 | CVE Year: 2017
Source: redhat | Vendor: OpenVPN Technologies, Inc | Product: openvpn
Status : PUBLISHED

---

CVE-2017-7478 Description

OpenVPN version 2.3.12 and newer is vulnerable to unauthenticated Denial of Service of server via received large control packet. Note that this issue is fixed in 2.3.15 and 2.4.2.

Metrics

CVSS Version: 3.1 | Base Score: n/a
Vector: n/a

l➤ Exploitability Metrics:
    Attack Vector (AV)*
    Attack Complexity (AC)*
    Privileges Required (PR)*
    User Interaction (UI)*
    Scope (S)*

l➤ Impact Metrics:
    Confidentiality Impact (C)*
    Integrity Impact (I)*
    Availability Impact (A)*

Weakness Enumeration (CWE)

CWE-ID: CWE-617
CWE Name: CWE-617
Source: OpenVPN Technologies, Inc

Common Attack Pattern Enumeration and Classification (CAPEC)

CAPEC-ID:
CAPEC Description:


Source: NVD (National Vulnerability Database).