VULNERABILITY INTELLIGENCE
CVE-2017-7478
CVSS score7.5 HIGH
EPSS probability13.78%
CISA KEVNot currently listed
Published2017-05-15
Last modified2026-06-17
CVSS vectorCVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Description
OpenVPN version 2.3.12 and newer is vulnerable to unauthenticated Denial of Service of server via received large control packet. Note that this issue is fixed in 2.3.15 and 2.4.2.
Weakness classification
- CWE-20: Improper Input Validation
- CWE-617: Reachable Assertion