OpenVPN has patched a denial-of-service vulnerability which authenticated users could trigger by sending malicious packets.