CVE-2020-20813 Denial of service in n/a

What is CVE-2020-20813?

CVE-2020-20813 is a high-severity denial of service vulnerability in n/a, published on 22 Aug 2023. An attacker can exploit it over the internet without logging in, with no action from the victim.

Official description

Control Channel in OpenVPN 2.4.7 and earlier allows remote attackers to cause a denial of service via crafted reset packet.

Weakness: CWE-400

Which versions are affected by CVE-2020-20813?

It affects 1 product.

Products include Openvpn Openvpn.

How do I fix CVE-2020-20813?

No fix has been published for CVE-2020-20813 yet. Limit exposure of the affected software until one is available.

Upgrade, then put limits on request size, rate and nesting depth so one client cannot exhaust the service. More about Denial of service.

Is CVE-2020-20813 being exploited?

There is no known exploitation of CVE-2020-20813 in the wild and no public exploit code.

Other vulnerabilities in n/a

• CVE-2025-12106 Memory corruption in OpenVPN Critical 9.1
• CVE-2024-5594 Information disclosure in OpenVPN Critical 9.1
• CVE-2018-7544 Cross-site request forgery in n/a Critical 9.1
• CVE-2006-1629 Code injection in n/a Critical 9.0
• CVE-2024-4877 Privilege escalation in OpenVPN High 8.8

Sources

• CVE record
• NVD
• OSV
• GitHub advisory
• How this page is made

Also known as GHSA-6mpq-5wjj-48jg, UBUNTU-CVE-2020-20813.