https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Thu, 08 Oct 2026 22:38:03 +0000 https://cve.radiocsirt.org/vuln/cve-2026-35058 <p><strong>Affected:</strong> OpenVPN</p> <p>Improper validation of packet length during tls-crypt-v2 key extraction in OpenVPN 2.6.0 through 2.6.19 and 2.7_alpha1 through 2.7.1 allows authenticated attackers to trigger a fatal assertion and cause a denial of service via a specially crafted packet.</p> <p><strong>Affected:</strong> OpenVPN</p> <p>Improper validation of packet length during tls-crypt-v2 key extraction in OpenVPN 2.6.0 through 2.6.19 and 2.7_alpha1 through 2.7.1 allows authenticated attackers to trigger a fatal assertion and cause a denial of service via a specially crafted packet.</p> https://cve.radiocsirt.org/vuln/cve-2026-35058 https://cve.radiocsirt.org/vuln/usn-8286-1 <p><strong>Affected:</strong> Ubuntu:22.04:LTS: openvpn, Ubuntu:24.04:LTS: openvpn, Ubuntu:25.10: openvpn, Ubuntu:26.04:LTS: openvpn</p> <p>Guannan Wang, Zhanpeng Liu, Guancheng Li, and Emma Reuter discovered that OpenVPN incorrectly handled suitably malformed packets with valid tls-crypt-v2 keys. An attacker could possibly use this issue to cause OpenVPN to crash, resulting in a denial of service. (CVE-2026-35058)</p> <p>Guannan Wang, Zhanpeng Liu, and Guancheng Li discovered that OpenVPN had a race condition in the TLS handshake process that could leak packet data from a previous handshake under certain circumstances. An attacker could possibly use this issue to obtain sensitive information. (CVE-2026-40215)</p> <p><strong>Affected:</strong> Ubuntu:22.04:LTS: openvpn, Ubuntu:24.04:LTS: openvpn, Ubuntu:25.10: openvpn, Ubuntu:26.04:LTS: openvpn</p> <p>Guannan Wang, Zhanpeng Liu, Guancheng Li, and Emma Reuter discovered that OpenVPN incorrectly handled suitably malformed packets with valid tls-crypt-v2 keys. An attacker could possibly use this issue to cause OpenVPN to crash, resulting in a denial of service. (CVE-2026-35058)</p> <p>Guannan Wang, Zhanpeng Liu, and Guancheng Li discovered that OpenVPN had a race condition in the TLS handshake process that could leak packet data from a previous handshake under certain circumstances. An attacker could possibly use this issue to obtain sensitive information. (CVE-2026-40215)</p> https://cve.radiocsirt.org/vuln/usn-8286-1