Every CVESearch/Get API key

CVE-2005-2533

OpenVPN before 2.0.1, when running in "dev tap" Ethernet bridging mode, allows remote...

2.1 LowFix available

CVE-2005-2533 is a low vulnerability (CVSS 2.1) in Openvpn, published August 24, 2005. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 0.68%, the 53rd percentile. Fixed in openvpn 2.0.2-1.

What does this mean?
Severity
2.1 LowCVSS 2.0, NVD
Exploit chance
0.68%EPSS, 53rd percentile
Exploitation
None knownNot on CISA’s or ENISA’s lists
Fixed in
2.0.2-1openvpn +3 more

Description

OpenVPN before 2.0.1, when running in "dev tap" Ethernet bridging mode, allows remote authenticated clients to cause a denial of service (memory exhaustion) via a flood of packets with a large number of spoofed MAC addresses.

Exploit likelihood

0.68%Down 0.4 points since Feb 4, 2022
90%50%10%1%

Affected products

Affected packages

Affected packages
PackageAffectedFixed
openvpn
Debian:12
before 2.0.2-1
2.0.2-1
openvpn
Debian:13
before 2.0.2-1
2.0.2-1
openvpn
Debian:14
before 2.0.2-1
2.0.2-1
openvpn
Debian:3.1
From an advisory covering 4 CVEs
before 2.0-1sarge1, plus listed versions
2.0-1
2.0-1sarge1

What each source reports

NVD Score used2.1

OpenVPN before 2.0.1, when running in "dev tap" Ethernet bridging mode, allows remote authenticated clients to cause a denial of service (memory exhaustion) via a flood of packets with a large number of spoofed MAC addresses.

Record
CVE-2005-2533
CVSS 2.0
2.1 LowAV:L/AC:L/Au:N/C:N/I:N/A:P
Updated
2026-11-02
CVE ListNo score

OpenVPN before 2.0.1, when running in "dev tap" Ethernet bridging mode, allows remote authenticated clients to cause a denial of service (memory exhaustion) via a flood of packets with a large number of spoofed MAC addresses.

Record
CVE-2005-2533
Updated
2026-11-02
EUVDEUVD-2005-2534No score

OpenVPN before 2.0.1, when running in "dev tap" Ethernet bridging mode, allows remote authenticated clients to cause a denial of service (memory exhaustion) via a flood of packets with a large number of spoofed MAC addresses.

Record
EUVD-2005-2534
Updated
2026-11-03
GitHub AdvisoriesGHSA-q7pv-xr8p-6j5fNo score

OpenVPN before 2.0.1, when running in "dev tap" Ethernet bridging mode, allows remote...

OpenVPN before 2.0.1, when running in "dev tap" Ethernet bridging mode, allows remote authenticated clients to cause a denial of service (memory exhaustion) via a flood of packets with a large number of spoofed MAC addresses.

Record
GHSA-q7pv-xr8p-6j5f
Updated
2026-11-02
OSVNo score

OpenVPN before 2.0.1, when running in "dev tap" Ethernet bridging mode, allows remote authenticated clients to cause a denial of service (memory exhaustion) via a flood of packets with a large number of spoofed MAC addresses.

Record
CVE-2005-2533
Updated
2026-11-02
OSVDEBIAN-CVE-2005-2533No score

OpenVPN before 2.0.1, when running in "dev tap" Ethernet bridging mode, allows remote authenticated clients to cause a denial of service (memory exhaustion) via a flood of packets with a large number of spoofed MAC addresses.

Record
DEBIAN-CVE-2005-2533
Updated
2026-11-02

History

History
RecordedChangedSources
affected, facts
aliasesEUVD
first indexedCVE List, GitHub Advisories, NVD, OSV

Dates are when Every CVE recorded each change. Upstream dates may differ.

References

PagesAll vulnerabilitiesBrowseDocsSourcesGuideGet API key
MoveEnter Open