OpenVPN AS Other Vulnerability (CVE-2021-4234)

Description

OpenVPN Access Server 2.10 and prior versions are susceptible to resending multiple packets in a response to a reset packet sent from the client which the client again does not respond to, resulting in a limited amplification attack.

Remediation

References

CVE-2021-4234

Related Vulnerabilities

Jboss EAP Cryptographic Issues Vulnerability (CVE-2014-0035)

WordPress Plugin LayerSlider Responsive WordPress Slider Multiple Vulnerabilities (6.2.0)

Magento XML Injection (aka Blind XPath Injection) Vulnerability (CVE-2021-21019)

WordPress Plugin SearchAutocomplete 'tags.php' SQL Injection (1.0.8)

YetiForce CRM Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2021-4116)

Severity

High

Classification

CVE-2021-4234 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:L