Security update for openvpn
This update for openvpn fixes the following issues: - CVE-2016-6329: Show which ciphers should no longer be used in openvpn --show-ciphers (bsc#995374) - CVE-2017-7478: openvpn: Authenticated user can DoS server by using a big payload in P_CONTROL (bsc#1038709) - CVE-2017-7479: openvpn: Denial of Service due to Exhaustion of Packet-ID counter (bsc#1038711) - Hardening measures found by internal audit (bsc#1038713)
02 / AFFECTED SOFTWARE
Affected packages
03 / CONNECTIONS
Connected vulnerabilities
04 / EVIDENCE
Source records
This update for openvpn fixes the following issues: - CVE-2016-6329: Show which ciphers should no longer be used in openvpn --show-ciphers (bsc#995374) - CVE-2017-7478: openvpn: Authenticated user can DoS server by using a big payload in P_CONTROL (bsc#1038709) - CVE-2017-7479: openvpn: Denial of Service due to Exhaustion of Packet-ID counter (bsc#1038711) - Hardening measures found by internal audit (bsc#1038713)
05 / REFERENCES
Further evidence
- https://bugzilla.suse.com/1038709
- https://bugzilla.suse.com/1038711
- https://bugzilla.suse.com/1038713
- https://bugzilla.suse.com/995374
- https://www.suse.com/security/cve/CVE-2016-6329
- https://www.suse.com/security/cve/CVE-2017-7478
- https://www.suse.com/security/cve/CVE-2017-7479
- https://www.suse.com/support/update/announcement/2017/suse-su-20171622-1/