CVE-2005-3409 Null dereference in n/a

What is CVE-2005-3409?

CVE-2005-3409 is a medium-severity vulnerability in n/a, published on 2 Nov 2005. An attacker can exploit it over the internet without logging in, with no action from the victim.

Official description

OpenVPN 2.x before 2.0.4, when running in TCP mode, allows remote attackers to cause a denial of service (segmentation fault) by forcing the accept function call to return an error status, which leads to a null dereference in an exception handler.

Which versions are affected by CVE-2005-3409?

It affects 2 products.

Products include Openvpn Openvpn, Openvpn Openvpn Access Server.

How do I fix CVE-2005-3409?

Upgrade to a fixed version.

Is CVE-2005-3409 being exploited?

There is no known exploitation of CVE-2005-3409 in the wild and no public exploit code.

Other vulnerabilities in n/a

• CVE-2025-12106 Memory corruption in OpenVPN Critical 9.1
• CVE-2024-5594 Information disclosure in OpenVPN Critical 9.1
• CVE-2018-7544 Cross-site request forgery in n/a Critical 9.1
• CVE-2006-1629 Code injection in n/a Critical 9.0
• CVE-2024-4877 Privilege escalation in OpenVPN High 8.8

Sources

• CVE record
• NVD
• OSV
• GitHub advisory
• How this page is made

Also known as DEBIAN-CVE-2005-3409, GHSA-5cc7-3r85-874q.