CVE-2017-7521CWE-400
OpenVPN versions before 2.4.3 and before 2.3.17 are vulnerable to remote denial-of-service due to memory exhaustion caused by memory leaks and double-free…
published June 27, 2017
What it is
OpenVPN versions before 2.4.3 and before 2.3.17 are vulnerable to remote denial-of-service due to memory exhaustion caused by memory leaks and double-free issue in extract_x509_extension().
The record
Technical detail
- CVSS
- Not scored
- CVSS v4.0
- Not supplied
- EPSS
- 0.03855 · 90.1th percentile
- Weakness
- CWE-400 · Uncontrolled Resource Consumption
- Published
- 2017-06-27T13:00Z
EPSS history
Timeline