CVE-2017-7522CWE-20

OpenVPN versions before 2.4.3 and before 2.3.17 are vulnerable to denial-of-service by authenticated remote attacker via sending a certificate with an embedded…

published June 27, 2017

CVSS
—
EPSS
6%
Percentile
92.8
In the wild
Unconfirmed
What it is

OpenVPN versions before 2.4.3 and before 2.3.17 are vulnerable to denial-of-service by authenticated remote attacker via sending a certificate with an embedded NULL character.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.05539 · 92.8th percentile
Weakness
CWE-20 · Improper Input Validation
Published
2017-06-27T13:00Z
EPSS history
Timeline
  • 27 JUN 13:00Z
    OpenVPN versions before 2.4.3 and before 2.3.17 are vulnerable to denial-of-service by authenticated remote attacker via sending a certificate with an embedded…
    cvelistv5