Vulnerability in Openvpn

CVE-2005-2533

OpenVPN before 2.0.1, when running in "dev tap" Ethernet bridging mode, allows remote authenticated clients to cause a denial of service (memory exhaustion) via a flood of packets with a large number of spoofed MAC addresses.

EPSS: 0.007 (48.8th percentile) — read the EPSS interpretation.

Affected products

Openvpn — versions 2.0, 2.0.1_rc1, 2.0.1_rc2
N/a — versions n/a

References

cve@mitre.org (x_refsource_SECUNIA, third-party-advisory)
cve@mitre.org (x_refsource_CONFIRM)
cve@mitre.org (vendor-advisory, Patch, x_refsource_MANDRIVA, Vendor Advisory)
cve@mitre.org (vendor-advisory, x_refsource_DEBIAN)
cve@mitre.org (x_refsource_SECUNIA, third-party-advisory)