CVE-2017-7521

CVE-2017-7521 is a remote denial-of-service vulnerability affecting OpenVPN versions prior to 2.4.3 and 2.3.17. This flaw stems from memory leaks and a double-free issue within the extract_x509_extension() function, leading to memory exhaustion. Rated with a CVSS score of 5.9 (Medium), it can be exploited remotely with high attack complexity, resulting in a complete loss of availability for affected systems. There is no evidence of active exploitation, public exploit code (Metasploit, Nuclei, ExploitDB), or significant community discussion, though it received limited media coverage.