Most recent entries from all

bdu:2025-05051

Withdrawn: CLEANSTART-2026-DC27717 — OpenVPN version 2

Withdrawn by the publisher.

Affected: CleanStart: pritunl

Multiple security vulnerabilities affect the pritunl package. OpenVPN version 2. See references for individual vulnerability details.

EUVD-2026-256676

fkie_cve-2025-2704

OpenVPN version 2.6.1 through 2.6.13 in server mode using TLS-crypt-v2 allows remote attackers to trigger a denial of service by corrupting and replaying network packets in the early handshake phase

GHSA-5gwv-2q72-gxrm

OpenVPN version 2.6.1 through 2.6.13 in server mode using TLS-crypt-v2 allows remote attackers to trigger a denial of service by corrupting and replaying network packets in the early handshake phase

OESA-2025-1396 — openvpn security update

Affected: openEuler:24.03-LTS-SP1: openvpn

OpenVPN is a full-featured open source SSL VPN solution that accommodates a wide range of configurations, including remote access, site-to-site VPNs, Wi-Fi security, and enterprise-scale remote access solutions with load balancing, failover, and fine-grained access-controls. Starting with the fundamental premise that complexity is the enemy of security, OpenVPN offers a cost-effective, lightweight alternative to other VPN technologies that is well-adapted for the SME and enterprise markets. Security Fix(es):

OpenVPN version 2.6.1 through 2.6.13 in server mode using TLS-crypt-v2 allows remote attackers to trigger a denial of service by corrupting and replaying network packets in the early handshake phase(CVE-2025-2704)

openSUSE-SU-2025:14979-1 — openvpn-2.6.14-1.1 on GA media

openvpn-2.6.14-1.1 on GA media

SUSE-SU-2025:1508-1 — Security update for openvpn

Security update for openvpn

UBUNTU-CVE-2025-2704

Affected: Ubuntu:24.04:LTS: openvpn

OpenVPN version 2.6.1 through 2.6.13 in server mode using TLS-crypt-v2 allows remote attackers to trigger a denial of service by corrupting and replaying network packets in the early handshake phase

WID-SEC-W-2025-0694 — OpenVPN: Schwachstelle ermöglicht Denial of Service

Ein entfernter, anonymer Angreifer kann eine Schwachstelle in OpenVPN ausnutzen, um einen Denial of Service Angriff durchzuführen.