Related Vulnerabilities: CVE-2017-7512  

A remote denial of service has been found in OpenVPN < 2.4.3. A remote client can exploit a memory leak in the server's certificate parsing code to make it leak a few bytes of memory for each connection attempt, causing it to run out of memory.

Severity High

Remote Yes

Type Denial of service

Description

A remote denial of service has been found in OpenVPN < 2.4.3. A remote client can exploit a memory leak in the server's certificate parsing code to make it leak a few bytes of memory for each connection attempt, causing it to run out of memory.

AVG-318 openvpn 2.4.2-1 2.4.3-1 Critical Fixed

22 Jun 2017 ASA-201706-27 AVG-318 openvpn Critical multiple issues

https://github.com/OpenVPN/openvpn/commit/2341f71619
https://community.openvpn.net/openvpn/wiki/VulnerabilitiesFixedInOpenVPN243