CVE-2020-20813

EUVD-2020-13593
Control Channel in OpenVPN 2.4.7 and earlier allows remote attackers to cause a denial of service via crafted reset packet.
ProviderTypeBase ScoreAtk. VectorAtk. ComplexityPriv. RequiredVector
NISTPrimary
7.5 HIGH
NETWORK
LOW
NONE
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Base Score
CVSS 3.x
EPSS Score
Percentile: 53%
Affected Products (NVD)
VendorProductVersion
openvpnopenvpn
𝑥
≤ 2.4.7
𝑥
= Vulnerable software versions
Ubuntu logo
Ubuntu Releases
Ubuntu Product
Codename
openvpn
bionic
deferred
focal
deferred
jammy
deferred
lunar
ignored
mantic
ignored
noble
deferred
trusty
deferred
xenial
deferred
Common Weakness Enumeration
References
https://www.freebuf.com/vuls/215171.html
https://www.freebuf.com/vuls/215171.html