Overly broad permissions can turn one compromised account into a much larger security problem. Learn how to reduce unnecessary access, review privileges, and apply least privilege across modern Linux systems. Review Linux Privileges×

Alerts This Week
Warning Icon 1 524
Alerts This Week
Warning Icon 1 524

Debian 7: DLA-944-1 Critical: OpenVPN Denial Of Service Threat

debian lts
Calendar Grey May 16, 2017
Scroller Debian Lts
OpenVPN patch enhances security to prevent service interruption linked to packet-id depletion. Upgrade advised for Ubuntu 18.
Denial of Service due to Exhaustion of Packet-ID counter An authenticated client can cause the server's the packet-id counter to roll over, which would lead the server process to h...
Topics%20covered

Topics Covered

security advisory denial of service security update Debian OpenVPN packet counter exhaustion CVE-2017-7479

Summary

We recommend that you upgrade your openvpn packages.

Further information about Debian LTS security advisories, how to apply
these updates to your system and frequently asked questions can be
found at: https://wiki.debian.org/LTS

--
Raphaël Hertzog ◈ Debian Developer

Support Debian LTS: https://www.freexian.com/lts/debian/
Learn to master Debian: https://debian-handbook.info/get/


Severity
critical
Lowest
Low
Medium
High
Critical

<pre><font face="Courier">Package: openvpn
Version: 2.2.1-8+deb7u4
CVE ID: CVE-2017-7479

Topics%20covered

Topics Covered

security advisory denial of service security update Debian OpenVPN packet counter exhaustion CVE-2017-7479

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.