---
id: 4525
title: "Security Assessment of OpenVPN"
source_domain: blog.quarkslab.com
source_url: "https://blog.quarkslab.com/security-assessment-of-openvpn.html"
published_at: "2017-05-10T22:00:00Z"
tags: ["security-audit", "cryptography", "vulnerability", "openvpn", "ostif", "quarkslab"]
phying_url: "https://phying.com/item/4525"
lang: en
---

# Security Assessment of OpenVPN

## Summary

OSTIF-funded security assessment of OpenVPN 2.4.0: 50 man-days of code and cryptography review that uncovered pre-auth and post-auth DoS bugs (CVE-2017-7478/7479) plus an info leak, fixed in 2.4.2.

## Intelligence Metadata

- **Sources:** blog.quarkslab.com
- **Published:** 2017-05-10T22:00:00Z
- **Original:** https://blog.quarkslab.com/security-assessment-of-openvpn.html
- **Phying News:** https://phying.com/item/4525