CVEvulnerability
CVE-2005-2534
2.6 LOW
Official page ↗
- Status
- Modified
- Published
- 2005-08-24
- Last modified
- 2026-06-16
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 2.6 LOW — AV:N/AC:H/Au:N/C:N/I:N/A:P
Description
Race condition in OpenVPN before 2.0.1, when --duplicate-cn is not enabled, allows remote attackers to cause a denial of service (server crash) via simultaneous TCP connections from multiple clients that use the same client certificate.
Affected configurations
• openvpn openvpn 2.0
• openvpn openvpn 2.0.1 rc1
• openvpn openvpn 2.0.1 rc2
• openvpn openvpn 2.0.1 rc3
• openvpn openvpn 2.0.1 rc4
• openvpn openvpn 2.0.1 rc5
• openvpn openvpn 2.0.1 rc6
• openvpn openvpn 2.0.1 rc7
• openvpn openvpn 2.0 beta1
• openvpn openvpn 2.0 beta2
• openvpn openvpn 2.0 beta3
• openvpn openvpn 2.0 beta4
• openvpn openvpn 2.0 beta5
• openvpn openvpn 2.0 beta6
• openvpn openvpn 2.0 beta7
• openvpn openvpn 2.0 beta8
• openvpn openvpn 2.0 beta9
• openvpn openvpn 2.0 beta10
• openvpn openvpn 2.0 beta11
• openvpn openvpn 2.0 beta12
• openvpn openvpn 2.0 beta13
• openvpn openvpn 2.0 beta15
• openvpn openvpn 2.0 beta16
• openvpn openvpn 2.0 beta17
• openvpn openvpn 2.0 beta18
• openvpn openvpn 2.0 beta19
• openvpn openvpn 2.0 beta20
• openvpn openvpn 2.0 beta28
• openvpn openvpn 2.0 rc1
• openvpn openvpn 2.0 rc2
• openvpn openvpn 2.0 rc3
• openvpn openvpn 2.0 rc4
• openvpn openvpn 2.0 rc5
• openvpn openvpn 2.0 rc6
• openvpn openvpn 2.0 rc7
• openvpn openvpn 2.0 rc8
• openvpn openvpn 2.0 rc9
• openvpn openvpn 2.0 rc10
• openvpn openvpn 2.0 rc11
• openvpn openvpn 2.0 rc12
• openvpn openvpn 2.0 rc13
• openvpn openvpn 2.0 rc14
• openvpn openvpn 2.0 rc15
• openvpn openvpn 2.0 rc16
• openvpn openvpn 2.0 rc17
• openvpn openvpn 2.0 rc18
• openvpn openvpn 2.0 rc19
• openvpn openvpn 2.0 rc20
• openvpn openvpn 2.0 rc21
• openvpn openvpn 2.0 test1
• openvpn openvpn 2.0 test2
• openvpn openvpn 2.0 test3
• openvpn openvpn 2.0 test5
• openvpn openvpn 2.0 test6
• openvpn openvpn 2.0 test7
• openvpn openvpn 2.0 test8
• openvpn openvpn 2.0 test9
• openvpn openvpn 2.0 test10
• openvpn openvpn 2.0 test11
• openvpn openvpn 2.0 test12
… and 14 more
References
- http://openvpn.net/changelog.html openvpn.net
- http://secunia.com/advisories/16463 secunia.com
- http://secunia.com/advisories/17103 secunia.com
- http://www.debian.org/security/2005/dsa-851 www.debian.org
- http://www.mandriva.com/security/advisories?name=MDKSA-2005:145 Patch, Vendor Advisory
- http://www.securityfocus.com/bid/14610 www.securityfocus.com
- http://openvpn.net/changelog.html openvpn.net
- http://secunia.com/advisories/16463 secunia.com
- http://secunia.com/advisories/17103 secunia.com
- http://www.debian.org/security/2005/dsa-851 www.debian.org
- http://www.mandriva.com/security/advisories?name=MDKSA-2005:145 Patch, Vendor Advisory
- http://www.securityfocus.com/bid/14610 www.securityfocus.com