CVE-2021-4234

Summary

OpenVPN Access Server 2.10 and prior versions are susceptible to resending multiple packets in a response to a reset packet sent from the client which the client again does not respond to, resulting in a limited amplification attack.

Affected Software

VendorProductVersion RangeStatus
n/aOpenVPN Access Server2.10 and prior versionaffected

Weaknesses

  • CWE-406: CWE-406: Insufficient Control of Network Message Volume

ADP Enrichment

CVE Program Container

Additional References

References