Re: [Openvpn-devel] Subject: Potential OpenVPN Vulnerability Report: Repeated TLS Handshake Failures Leading to Denial-of-Service Conditions

[נתי ש. <ns...@gm...>]

i attached logs

‫בתאריך יום א׳, 17 בנוב׳ 2024 ב-17:51 מאת ‪Gert Doering‬‏ <‪
ge...@gr...‬‏>:‬

> Hi,
>
> On Sun, Nov 17, 2024 at 03:50:18PM +0200, ?????? ???????? wrote:
> > I think there is an option for DoS and therefore there is an option to
> cve
> > or to write a patch..........
>
> What you *think* is only relevant if you can actually *demonstrate* this.
>
> Show the DoS - in a way relevant to OpenVPN - "I broke the network so
> OpenVPN is no longer connecting" is only interesting if it leads to
> further problems, like "the client starts looping and fills all disk
> space with meaningless log lines" or "the server process can no longer
> handle other clients either".
>
> We've had all of this in some form or the other (mostly related to
> Linux DCO desynchronization between OpenVPN and kernel), but you have
> not given us any material that demonstrates anything interesting.
>
> I will now stop answering your e-mails.
>
> gert
> --
> "If was one thing all people took for granted, was conviction that if you
>  feed honest figures into a computer, honest figures come out. Never
> doubted
>  it myself till I met a computer with a sense of humor."
>                              Robert A. Heinlein, The Moon is a Harsh
> Mistress
>
> Gert Doering - Munich, Germany
> ge...@gr...
>


-- 
<https://netanel.ml>