CVE-2021-4234CWE-406

OpenVPN Access Server 2.10 and prior versions are susceptible to resending multiple packets in a response to a reset packet sent from the client which the…

published July 6, 2022

CVSS
—
EPSS
1%
Percentile
59.1
In the wild
Unconfirmed
What it is

OpenVPN Access Server 2.10 and prior versions are susceptible to resending multiple packets in a response to a reset packet sent from the client which the client again does not respond to, resulting in a limited amplification attack.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.00894 · 59.1th percentile
Weakness
CWE-406 · Insufficient Control of Network Message Volume (Network Amplification)
Published
2022-07-06T19:10Z
EPSS history
Timeline
  • 06 JUL 19:10Z
    OpenVPN Access Server 2.10 and prior versions are susceptible to resending multiple packets in a response to a reset packet sent from the client which the…
    cvelistv5