OpenVPN before 2.0.1 when running in \dev tap\ Ethernet bridging mode allows remote authenticated clients to cause a denial of service (memory exhaustion) via a flood of packets with a large number of spoofed MAC addresses.