FreeBSD : openvpn -- denial of service: undecryptable packet from authorized client can disconnect unrelated clients (d1c39c8e-05ab-4739-870f-765490fa2052)
Medium Nessus Plugin ID 21513
SynopsisThe remote FreeBSD host is missing a security-related update.
DescriptionJames Yonan reports :
If the client sends a packet which fails to decrypt on the server, the OpenSSL error queue is not properly flushed, which can result in another unrelated client instance on the server seeing the error and responding to it, resulting in disconnection of the unrelated client.
SolutionUpdate the affected package.