CVE-2017-7478

—

CVSS 3.0

7.5 high

EPSS

14%p96

Published

May 15, 2017 (May 15, 2017)

Modified

Jun 17, 2026

Description

OpenVPN version 2.3.12 and newer is vulnerable to unauthenticated Denial of Service of server via received large control packet. Note that this issue is fixed in 2.3.15 and 2.4.2.

Vendors: openvpn
Products: openvpn
Weakness: CWE-617, CWE-20
Vector: CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

NVD CVE.org GitHub PoCs EPSS (13.9%)

In the news0 stories

No ingested article mentions this CVE yet.