CVE-2021-4234 Information

Description

OpenVPN Access Server 2.10 and prior versions are susceptible to resending multiple packets in a response to a reset packet sent from the client which the client again does not respond to resulting in a limited amplification attack.

Reference

https://openvpn.net/vpn-server-resources/release-notes/#openvpn-access-server-2-11-0