Most recent entries from all

bdu:2025-14653

Withdrawn: CLEANSTART-2026-MW52599 — OpenVPN version 2

Withdrawn by the publisher.

Affected: CleanStart: pritunl

Multiple security vulnerabilities affect the pritunl package. OpenVPN version 2. See references for individual vulnerability details.

EUVD-2026-263378

fkie_cve-2025-13086

Improper validation of source IP addresses in OpenVPN version 2.6.0 through 2.6.15 and 2.7_alpha1 through 2.7_rc1 allows an attacker to open a session from a different IP address which did not initiate the connection resulting in a denial of service for the originating client

GHSA-xv5w-q5wq-r3c3

Improper validation of source IP addresses in OpenVPN version 2.6.0 through 2.7_rc1 allows an attacker to open a session from a different IP address which did not initiate the connection resulting in a denial of service for the originating client

OESA-2025-2742 — openvpn security update

Affected: openEuler:24.03-LTS-SP2: openvpn

OpenVPN is a full-featured open source SSL VPN solution that accommodates a wide range of configurations, including remote access, site-to-site VPNs, Wi-Fi security, and enterprise-scale remote access solutions with load balancing, failover, and fine-grained access-controls. Starting with the fundamental premise that complexity is the enemy of security, OpenVPN offers a cost-effective, lightweight alternative to other VPN technologies that is well-adapted for the SME and enterprise markets. Security Fix(es):

This is a security vulnerability affecting Debian packages. More details are required from the Debian security tracker.(CVE-2025-13086)

openSUSE-SU-2026:20137-1 — Security update for openvpn

Security update for openvpn

SUSE-SU-2026:20196-1 — Security update for openvpn

Security update for openvpn

UBUNTU-CVE-2025-13086

Affected: Ubuntu:24.04:LTS: openvpn, Ubuntu:25.10: openvpn

WID-SEC-W-2025-2636 — OpenVPN: Mehrere Schwachstellen

Ein entfernter, anonymer Angreifer kann mehrere Schwachstellen in OpenVPN ausnutzen, um Sicherheitsmaßnahmen zu umgehen und andere nicht näher spezifizierte Angriffe durchzuführen, beispielsweise einen Denial-of-Service-Zustand herbeizuführen oder vertrauliche Informationen offenzulegen.