CVE:CVE-2014-8104
CNNVD:CNNVD-201412-044
OpenVPN是美国OpenVPN公司的一个用于创建虚拟专用网络（VPN）加密通道的软件包，它使用OpenSSL库来加密数据与控制信息，并允许创建的VPN使用公开密钥、电子证书或者用户名/密码来进行身份验证。
OpenVPN中存在安全漏洞。远程攻击者可通过发送较小的控制信道数据包利用该漏洞造成拒绝服务（服务器崩溃）。以下版本受到影响：OpenVPN 2.0.11之前2.x版本，2.1.x版本，2.2.3之前2.2.x版本，2.3.6之前2.3.x版本。
solution:Upgrade mageia mageia to a higher version than 4.0,and avoid the version 4.0; Upgrade debian debian_linux to a higher version than 7.0,8.0,and avoid the version 7.0,8.0; Upgrade opensuse opensuse to a higher version than 12.3,13.1,13.2,and avoid the version 12.3,13.1,13.2; Upgrade openvpn openvpn to a higher version than 2.0.1_rc1,2.0.1_rc2,2.0.1_rc3,2.0.1_rc4,2.0.1_rc5,2.0.1_rc6,2.0.1_rc7,2.0.2_rc1,2.0.3_rc1,2.0.4,2.0.6_rc1,2.0.9,2.0_rc1,2.0_rc2,2.0_rc3,2.0_rc4,2.0_rc5,2.0_rc6,2.0_rc7,2.0_rc8,2.0_rc9,2.0_rc10,2.0_rc11,2.0_rc12,2.0_rc13,2.0_rc14,2.0_rc15,2.0_rc16,2.0_rc17,2.0_rc18,2.0_rc19,2.0_rc20,2.0_rc21,2.0_test1,2.0_test2,2.0_test3,2.0_test4,2.0_test5,2.0_test6,2.0_test7,2.0_test8,2.0_test9,2.0_test10,2.0_test11,2.0_test12,2.0_test14,2.0_test15,2.0_test16,2.0_test17,2.0_test18,2.0_test19,2.0_test20,2.0_test21,2.0_test22,2.0_test23,2.0_test24,2.0_test25,2.0_test26,2.0_test27,2.0_test28,2.0_test29,2.1:beta-1,2.1:beta-10,2.1:beta-11,2.1:beta-12,2.1:beta-13,2.1:beta-14,2.1:beta-15,2.1:beta-16,2.1:beta-2,2.1:beta-3,2.1:beta-4,2.1:beta-5,2.1:beta-6,2.1:beta-7,2.1:beta-8,2.1:beta-9,2.1:rc_1,2.1:rc_10,2.1:rc_11,2.1:rc_12,2.1:rc_13,2.1:rc_14,2.1:rc_15,2.1:rc_16,2.1:rc_17,2.1:rc_18,2.1:rc_19,2.1:rc_2,2.1:rc_20,2.1:rc_21,2.1:rc_22,2.1:rc_3,2.1:rc_4,2.1:rc_5,2.1:rc_6,2.1:rc_7,2.1:rc_8,2.1:rc_9,2.1.0,2.1.1,2.1.2,2.1.3,2.1.4,2.2:beta1,2.2:beta2,2.2:beta3,2.2:beta4,2.2:beta5,2.2.0,2.2.1,2.2.2,2.3:alpha1,2.3:alpha2,2.3:alpha3,2.3:beta1,2.3:rc1,2.3:rc2,2.3.0,2.3.1,2.3.2,2.3.3,2.3.4,2.3.5,and avoid the version 2.0.1_rc1,2.0.1_rc2,2.0.1_rc3,2.0.1_rc4,2.0.1_rc5,2.0.1_rc6,2.0.1_rc7,2.0.2_rc1,2.0.3_rc1,2.0.4,2.0.6_rc1,2.0.9,2.0_rc1,2.0_rc2,2.0_rc3,2.0_rc4,2.0_rc5,2.0_rc6,2.0_rc7,2.0_rc8,2.0_rc9,2.0_rc10,2.0_rc11,2.0_rc12,2.0_rc13,2.0_rc14,2.0_rc15,2.0_rc16,2.0_rc17,2.0_rc18,2.0_rc19,2.0_rc20,2.0_rc21,2.0_test1,2.0_test2,2.0_test3,2.0_test4,2.0_test5,2.0_test6,2.0_test7,2.0_test8,2.0_test9,2.0_test10,2.0_test11,2.0_test12,2.0_test14,2.0_test15,2.0_test16,2.0_test17,2.0_test18,2.0_test19,2.0_test20,2.0_test21,2.0_test22,2.0_test23,2.0_test24,2.0_test25,2.0_test26,2.0_test27,2.0_test28,2.0_test29,2.1:beta-1,2.1:beta-10,2.1:beta-11,2.1:beta-12,2.1:beta-13,2.1:beta-14,2.1:beta-15,2.1:beta-16,2.1:beta-2,2.1:beta-3,2.1:beta-4,2.1:beta-5,2.1:beta-6,2.1:beta-7,2.1:beta-8,2.1:beta-9,2.1:rc_1,2.1:rc_10,2.1:rc_11,2.1:rc_12,2.1:rc_13,2.1:rc_14,2.1:rc_15,2.1:rc_16,2.1:rc_17,2.1:rc_18,2.1:rc_19,2.1:rc_2,2.1:rc_20,2.1:rc_21,2.1:rc_22,2.1:rc_3,2.1:rc_4,2.1:rc_5,2.1:rc_6,2.1:rc_7,2.1:rc_8,2.1:rc_9,2.1.0,2.1.1,2.1.2,2.1.3,2.1.4,2.2:beta1,2.2:beta2,2.2:beta3,2.2:beta4,2.2:beta5,2.2.0,2.2.1,2.2.2,2.3:alpha1,2.3:alpha2,2.3:alpha3,2.3:beta1,2.3:rc1,2.3:rc2,2.3.0,2.3.1,2.3.2,2.3.3,2.3.4,2.3.5; Upgrade openvpn openvpn_access_server to a higher version than 2.0.0,2.0.1,2.0.2,2.0.3,2.0.5,2.0.6,2.0.7,2.0.8,2.0.10,and avoid the version 2.0.0,2.0.1,2.0.2,2.0.3,2.0.5,2.0.6,2.0.7,2.0.8,2.0.10; Upgrade canonical ubuntu_linux to a higher version than 12.04,14.04,14.10,and avoid the version 12.04,14.04,14.10