- Home
- CVEs with nessus.description==Steffan Karger reports :
The bounds check in read_key() was performed after using the value,
instead of before. If 'key-method 1' is used, this allowed an attacker
to send a malformed packet to trigger a stack-based buffer overflow. [...]
Note that 'key-method 1' has been replaced by 'key method 2' as the
default in OpenVPN 2.0 (released on 2005-04-17), and explicitly
deprecated in 2.4 and marked for removal in 2.5. This should limit the
amount of users impacted by this issue.
Max CVSS | 0 |
Min CVSS | 0 |
Total Count | 2 |
| ID | CVSS | Summary | Last (major) update | Published |
Back to Top
Mark selected
Back to Top