CVE-2017-7479 - log back

CVE-2017-7479 created at 25 Sep 2019 19:31:40
Severity
+ Medium
Remote
+ Remote
Type
+ Denial of service
Description
+ A security issue has been found in OpenVPN <= 2.4.1 where an authenticated attacker can crash a server using an AEAD mode cipher by sending crafted data to exhaust the packet counter.
References
+ https://community.openvpn.net/openvpn/wiki/QuarkslabAndCryptographyEngineerAudits
+ https://ostif.org/the-openvpn-2-4-0-audit-by-ostif-and-quarkslab-results/
+ http://blog.quarkslab.com/security-assessment-of-openvpn.html
Notes