OpenVPN 2.x before 2.0.11, 2.1.x, 2.2.x before 2.2.3, and 2.3.x before 2.3.6 allows remote authenticated users to cause a denial of service (server crash) via a small control channel packet.

A remote denial of service attack against openvpn was fixed, where a authenticated client cloud stop the server by triggering a server-side ASSERT (CVE-2014-8104),

Note that Tenable Network Security has extracted the preceding description block directly from the SUSE security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

Updated openvpn packages fix security vulnerability :

Dragana Damjanovic discovered that OpenVPN incorrectly handled certain control channel packets. An authenticated attacker could use this issue to cause an OpenVPN server to crash, resulting in a denial of service (CVE-2014-8104).

Dragana Damjanovic discovered that an authenticated client could crash an OpenVPN server by sending a control packet containing less than four bytes as payload.

For the oldstable distribution (squeeze), this problem has been fixed in version 2.1.3-2+squeeze3 in squeeze-lts.

We recommend that you upgrade your openvpn packages.

NOTE: Tenable Network Security has extracted the preceding description block directly from the DLA security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

The remote host is affected by the vulnerability described in GLSA-201412-41 (OpenVPN: Denial of Service)

    OpenVPN does not properly handle control channel packets that are too       small.
  Impact :

    A remote authenticated attacker could send a specially crafted control       channel packet, possibly resulting in a Denial of Service condition.
  Workaround :

    There is no known workaround at this time.

Updated openvpn packages fix security vulnerability :

Dragana Damjanovic discovered that OpenVPN incorrectly handled certain control channel packets. An authenticated attacker could use this issue to cause an OpenVPN server to crash, resulting in a denial of service (CVE-2014-8104).

The openvpn packages has been updated to the 2.3.2 version and patched to correct this issue.

Fix for CVE-2014-8104.

https://community.openvpn.net/openvpn/wiki/SecurityAnnouncement-97597e 732b

Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

New openvpn packages are available for Slackware 13.0, 13.1, 13.37, 14.0, 14.1, and -current to fix a security issue.

This update fixes a critical denial of service vulnerability in OpenVPN :

  - Critical denial of service vulnerability in OpenVPN     servers that can be triggered by authenticated     attackers. Also an incompatibility with OpenVPN and     OpenSSL in FIPS mode has been fixed. (bnc#895882).
    (CVE-2014-8104)

openvpn was updated to fix a denial-of-service vulnerability where an authenticated client could stop the server by triggering a server-side ASSERT (bnc#907764,CVE-2014-8104),

According to its self-reported version number, the version of OpenVPN installed on the remote host is affected by an error related to 'Control Channel Packet' handling and TLS-authenticated clients that could allow denial of service attacks.

The remote Ubuntu 14.04 LTS host has a package installed that is affected by a vulnerability as referenced in the USN-2430-1 advisory.

    Dragana Damjanovic discovered that OpenVPN incorrectly handled certain control channel packets. An     authenticated attacker could use this issue to cause an OpenVPN server to crash, resulting in a denial of     service.

Tenable has extracted the preceding description block directly from the Ubuntu security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

Dragana Damjanovic discovered that an authenticated client could crash an OpenVPN server by sending a control packet containing less than four bytes as payload.

The OpenVPN project reports :

In late November 2014 Dragana Damjanovic notified OpenVPN developers of a critical denial of service security vulnerability (CVE-2014-8104). The vulnerability allows an tls-authenticated client to crash the server by sending a too-short control channel packet to the server. In other words this vulnerability is denial of service only.

ID	Name	Product	Family	Severity
83652	SUSE SLED12 / SLES12 Security Update : openvpn (SUSE-SU-2014:1694-1)	Nessus	SuSE Local Security Checks	medium
82392	Mandriva Linux Security Advisory : openvpn (MDVSA-2015:139)	Nessus	Mandriva Local Security Checks	medium
82243	Debian DLA-98-1 : openvpn security update	Nessus	Debian Local Security Checks	medium
80262	GLSA-201412-41 : OpenVPN: Denial of Service	Nessus	Gentoo Local Security Checks	medium
79991	Mandriva Linux Security Advisory : openvpn (MDVSA-2014:246)	Nessus	Mandriva Local Security Checks	medium
79930	Fedora 20 : openvpn-2.3.6-1.fc20 / pkcs11-helper-1.11-3.fc20 (2014-16273)	Nessus	Fedora Local Security Checks	medium
79922	Fedora 19 : openvpn-2.3.6-1.fc19 / pkcs11-helper-1.11-3.fc19 (2014-16234)	Nessus	Fedora Local Security Checks	medium
79873	Amazon Linux AMI : openvpn (ALAS-2014-459)	Nessus	Amazon Linux Local Security Checks	medium
79869	Slackware 13.0 / 13.1 / 13.37 / 14.0 / 14.1 / current : openvpn (SSA:2014-344-04)	Nessus	Slackware Local Security Checks	medium
79822	SuSE 11.3 Security Update : OpenVPN (SAT Patch Number 10061)	Nessus	SuSE Local Security Checks	medium
79821	openSUSE Security Update : openvpn (openSUSE-SU-2014:1594-1)	Nessus	SuSE Local Security Checks	medium
79746	OpenVPN 2.x < 2.2.3 / 2.3.6 Control Channel Packet Handling DoS	Nessus	Windows	medium
79689	Ubuntu 14.04 LTS : OpenVPN vulnerability (USN-2430-1)	Nessus	Ubuntu Local Security Checks	medium
79669	Debian DSA-3084-1 : openvpn - security update	Nessus	Debian Local Security Checks	medium
79656	FreeBSD : OpenVPN -- denial of service security vulnerability (23ab5c3e-79c3-11e4-8b1e-d050992ecde8)	Nessus	FreeBSD Local Security Checks	medium

Detections

Analytics

CVE-2014-8104

medium

Tenable Plugins

medium

medium

medium

medium

medium

medium

medium

medium

medium

medium

medium

medium

medium

medium

medium