CVE-2005-2534
Race condition in OpenVPN before 2.0.1, when --duplicate-cn is not enabled, allows remote...
CVE-2005-2534 is a low vulnerability (CVSS 2.6) in Openvpn, published August 24, 2005. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 0.97%, the 62nd percentile. Fixed in openvpn 2.0.2-1.
- Severity
- 2.6 LowCVSS 2.0, NVD
- Exploit chance
- 0.97%EPSS, 62nd percentile
- Exploitation
- None knownNot on CISA’s or ENISA’s lists
- Fixed in
2.0.2-1openvpn +3 more
Description
Race condition in OpenVPN before 2.0.1, when --duplicate-cn is not enabled, allows remote attackers to cause a denial of service (server crash) via simultaneous TCP connections from multiple clients that use the same client certificate.
Exploit likelihood
Affected products
Affected packages
What each source reports
NVD Score used
Race condition in OpenVPN before 2.0.1, when --duplicate-cn is not enabled, allows remote attackers to cause a denial of service (server crash) via simultaneous TCP connections from multiple clients that use the same client certificate.
- Record
CVE-2005-2534- CVSS 2.0
- 2.6 Low
AV:N/AC:H/Au:N/C:N/I:N/A:P - Updated
- 2026-11-02
CVE ListNo score
Race condition in OpenVPN before 2.0.1, when --duplicate-cn is not enabled, allows remote attackers to cause a denial of service (server crash) via simultaneous TCP connections from multiple clients that use the same client certificate.
- Record
CVE-2005-2534- Updated
- 2026-11-02
EUVDEUVD-2005-2535No score
Race condition in OpenVPN before 2.0.1, when --duplicate-cn is not enabled, allows remote attackers to cause a denial of service (server crash) via simultaneous TCP connections from multiple clients that use the same client certificate.
- Record
EUVD-2005-2535- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-gj66-3prg-44gqNo score
Race condition in OpenVPN before 2.0.1, when --duplicate-cn is not enabled, allows remote...
Race condition in OpenVPN before 2.0.1, when --duplicate-cn is not enabled, allows remote attackers to cause a denial of service (server crash) via simultaneous TCP connections from multiple clients that use the same client certificate.
- Record
GHSA-gj66-3prg-44gq- Updated
- 2026-11-02
OSVNo score
Race condition in OpenVPN before 2.0.1, when --duplicate-cn is not enabled, allows remote attackers to cause a denial of service (server crash) via simultaneous TCP connections from multiple clients that use the same client certificate.
- Record
CVE-2005-2534- Updated
- 2026-11-02
OSVDEBIAN-CVE-2005-2534No score
Race condition in OpenVPN before 2.0.1, when --duplicate-cn is not enabled, allows remote attackers to cause a denial of service (server crash) via simultaneous TCP connections from multiple clients that use the same client certificate.
- Record
DEBIAN-CVE-2005-2534- Updated
- 2026-11-02
History
| Recorded | Changed | Sources |
|---|---|---|
| affected, facts | ||
| aliases | EUVD | |
| first indexed | CVE List, GitHub Advisories, NVD, OSV |
Dates are when Every CVE recorded each change. Upstream dates may differ.
References
secunia.com/advisories/17103
openvpn.net/changelog.html
securityfocus.com/bid/14610
mandriva.com/security/advisories?name=MDKSA-2005:145
debian.org/security/2005/dsa-851
nvd.nist.gov/vuln/detail/CVE-2005-2534
github.com/advisories/GHSA-gj66-3prg-44gq
security-tracker.debian.org/tracker/CVE-2005-2534