Related Vulnerabilities: CVE-2017-7479  

A security issue has been found in OpenVPN <= 2.4.1 where an authenticated attacker can crash a server using an AEAD mode cipher by sending crafted data to exhaust the packet counter.

Severity Medium

Remote Yes

Type Denial of service

Description

A security issue has been found in OpenVPN <= 2.4.1 where an authenticated attacker can crash a server using an AEAD mode cipher by sending crafted data to exhaust the packet counter.

AVG-271 openvpn 2.4.1-2 2.4.2-1 High Fixed

13 May 2017 ASA-201705-16 AVG-271 openvpn High denial of service

https://community.openvpn.net/openvpn/wiki/QuarkslabAndCryptographyEngineerAudits
https://ostif.org/the-openvpn-2-4-0-audit-by-ostif-and-quarkslab-results/
http://blog.quarkslab.com/security-assessment-of-openvpn.html