Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

nvd логотип

CVE-2025-13086

Опубликовано: 03 дек. 2025
Источник: nvd
CVSS3: 7.5
EPSS Низкий

Описание

Improper validation of source IP addresses in OpenVPN version 2.6.0 through 2.6.15 and 2.7_alpha1 through 2.7_rc1 allows an attacker to open a session from a different IP address which did not initiate the connection resulting in a denial of service for the originating client

Уязвимые конфигурации

Конфигурация 1

Одно из

cpe:2.3:a:openvpn:openvpn:*:*:*:*:community:*:*:*
Версия от 2.6.0 (включая) до 2.6.16 (исключая)
cpe:2.3:a:openvpn:openvpn:2.7:alpha1:*:*:community:*:*:*
cpe:2.3:a:openvpn:openvpn:2.7:alpha2:*:*:community:*:*:*
cpe:2.3:a:openvpn:openvpn:2.7:alpha3:*:*:community:*:*:*
cpe:2.3:a:openvpn:openvpn:2.7:beta1:*:*:community:*:*:*
cpe:2.3:a:openvpn:openvpn:2.7:beta2:*:*:community:*:*:*
cpe:2.3:a:openvpn:openvpn:2.7:beta3:*:*:community:*:*:*
cpe:2.3:a:openvpn:openvpn:2.7:rc1:*:*:community:*:*:*

EPSS

Процентиль: 19%
0.00061
Низкий

7.5 High

CVSS3

Дефекты

CWE-940

Связанные уязвимости

CVSS3: 7.5
ubuntu
4 месяца назад

Improper validation of source IP addresses in OpenVPN version 2.6.0 through 2.6.15 and 2.7_alpha1 through 2.7_rc1 allows an attacker to open a session from a different IP address which did not initiate the connection resulting in a denial of service for the originating client

CVSS3: 6.5
redhat
4 месяца назад

Improper validation of source IP addresses in OpenVPN version 2.6.0 through 2.6.15 and 2.7_alpha1 through 2.7_rc1 allows an attacker to open a session from a different IP address which did not initiate the connection resulting in a denial of service for the originating client

CVSS3: 7.5
debian
4 месяца назад

Improper validation of source IP addresses in OpenVPN version 2.6.0 th ...

suse-cvrf
около 2 месяцев назад

Security update for openvpn

suse-cvrf
20 дней назад

Security update for openvpn

EPSS

Процентиль: 19%
0.00061
Низкий

7.5 High

CVSS3

Дефекты

CWE-940