SUSE-SU-2017:1642-1 -- SLES openvpnID: oval:org.secpod.oval:def:89044973 | Date: (C)2021-07-20 (M)2022-10-10 |
Class: PATCH | Family: unix |
This update for openvpn fixes the following issues: - It was possible to trigger an assertion by sending a malformed IPv6 packet. That issue could have been abused to remotely shutdown an openvpn server or client, if IPv6 and --mssfix were enabled and if the IPv6 networks used inside the VPN were known. [bsc#1044947, CVE-2017-7508]
Platform: |
SUSE Linux Enterprise Server 11 SP4 |