Am 18.11.24 um 08:37 schrieb נתי שטרן:
What can I do to assign a CVE?
I attached the CVE team of ISRAEL CERT to conversation
Report something that is considered a vulnerability.
For the CVE team included in the CC:
The reporter has submitted logs around the
TLS Error: TLS key negotiation failed to occur within 5 seconds
SIGUSR1[soft,tls-error] received, process restarting
from the client that indicate a normal connection problem together with
exponential backoff. He claims this is a server side DoS. The OpenVPN
team strongly disagrees based on the logs and lack of any other evidence.
Arne
_______________________________________________
Openvpn-devel mailing list
Openvpn-devel@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/openvpn-devel