CVE-2005-2532: Openvpn

Medium severity, CVSS 5.0. EPSS: 2.7% chance of exploitation in the next 30 days.

OpenVPN before 2.0.1 does not properly flush the OpenSSL error queue when a packet can not be decrypted by the server, which allows remote authenticated attackers to cause a denial of service (client disconnection) via a large number of packets that can not be decrypted.

Affected products

• Openvpn Openvpn: version 2.0 only; version 2.0.1_rc1 only; version 2.0.1_rc2 only; version 2.0.1_rc3 only; version 2.0.1_rc4 only; version 2.0.1_rc5 only; …

Published 2005-08-24. Last modified 2026-06-16.