OpenVPN Multiple Vulnerabilities

Multiple vulnerabilities were identified in OpenVPN. A remote attacker could exploit some of these vulnerabilities to trigger denial of service condition, sensitive information disclosure and security restriction bypass on the targeted system.

Impact

• Denial of Service
• Information Disclosure
• Security Restriction Bypass

System / Technologies affected

• OpenVPN versions 2.6.0 through 2.6.15 and 2.7_alpha1 through 2.7_rc1

Solutions

Before installation of the software, please visit the vendor web-site for more details.

Apply fixes issued by the vendor:

• https://www.mail-archive.com/openvpn-announce@lists.sourceforge.net/msg00152.html

Source link