CVE-2005-2532

OpenVPN before 2.0.1 does not properly flush the OpenSSL error queue when a packet can not be decrypted by the server, which allows remote authenticated…

published August 24, 2005

CVSS
—
EPSS
3%
Percentile
86.0
In the wild
Unconfirmed
What it is

OpenVPN before 2.0.1 does not properly flush the OpenSSL error queue when a packet can not be decrypted by the server, which allows remote authenticated attackers to cause a denial of service (client disconnection) via a large number of packets that can not be decrypted.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.02738 · 86.0th percentile
Published
2005-08-24T04:00Z
EPSS history
Timeline
  • 24 AUG 04:00Z
    OpenVPN before 2.0.1 does not properly flush the OpenSSL error queue when a packet can not be decrypted by the server, which allows remote authenticated…
    cvelistv5