suse · CVE-2005-3409

Quick triage

Priority: medium Published: 2021-05-30 12:34:00 UTC Updated: 2026-04-18 20:42:45 UTC

View at Official suse advisory, NVD, CVE.org · CVE detail

Freshness: upstream tracker timestamp is available; use API updated time as primary recency signal.

Tracker summary

CVE-2005-3409 severity moderate: SUSE including 11 source package names (openvpn, openvpn-2.5.3-1.2, …), 38 product×package rows across 16 product lines (SUSE CaaS Platform 4.0, SUSE Enterprise Storage 6, … (16 product lines)): Known Not Affected 30, Fixed 8.

Description:

OpenVPN 2.x before 2.0.4, when running in TCP mode, allows remote attackers to cause a denial of service (segmentation fault) by forcing the accept function call to return an error status, which leads to a null dereference in an exception handler.

cvelogic Threat Intelligence