CVE-2017-7478 log

Severity High
Remote Yes
Type Denial of service
A security issue has been found in OpenVPN <= 2.4.1 where an unauthenticated attacker can send a packet with an unexpected payload size during SSL handshake, causing a server shutdown. Servers using tls-auth are protected against this attack as packets with an invalid HMAC are discarded before being processed by the vulnerable code.
Group Package Affected Fixed Severity Status Ticket
AVG-271 openvpn 2.4.1-2 2.4.2-1 High Fixed
Date Advisory Group Package Severity Type
13 May 2017 ASA-201705-16 AVG-271 openvpn High denial of service