Impact on Access Server: None.
Details:
OpenVPN Access Server uses the Twisted Python library. Versions of Twisted prior to 26.10.0rc1 are vulnerable to resource exhaustion in the twisted.names component, potentially allowing an attacker to spoof DNS responses.
However, Access Server doesn't use the affected code path. Although Access Server includes a DNS proxy for its domain routing feature, it uses the dnspython library instead of the affected Twisted component.
Remediation:
No action is required.
Need help?
If you have questions, submit a support ticket.
Comments
0 comments
Article is closed for comments.