Описание
The Windows interactive service in OpenVPN 2.7_alpha1 through 2.7.4 allows remote attackers to cause persistent DNS state pollution or a service crash via a crafted search domain during the disconnection process
A flaw was found in the Windows interactive service of OpenVPN. A remote attacker can exploit this vulnerability by sending a specially crafted search domain during the disconnection process. This can lead to persistent DNS (Domain Name System) state pollution, which may disrupt network services, or cause the OpenVPN service to crash, resulting in a denial of service.
Отчет
An Important flaw was found in OpenVPN's Windows interactive service. Remote attackers can cause persistent DNS state pollution or a service crash by sending a crafted search domain during disconnection. This vulnerability does not affect Red Hat products, as it is specific to the Windows platform.
Дополнительная информация
Статус:
EPSS
7.1 High
CVSS3
Связанные уязвимости
The Windows interactive service in OpenVPN 2.7_alpha1 through 2.7.4 allows remote attackers to cause persistent DNS state pollution or a service crash via a crafted search domain during the disconnection process
The Windows interactive service in OpenVPN 2.7_alpha1 through 2.7.4 allows remote attackers to cause persistent DNS state pollution or a service crash via a crafted search domain during the disconnection process
The Windows interactive service in OpenVPN 2.7_alpha1 through 2.7.4 al ...
The Windows interactive service in OpenVPN 2.7_alpha1 through 2.7.4 allows remote attackers to cause persistent DNS state pollution or a service crash via a crafted search domain during the disconnection process
EPSS
7.1 High
CVSS3