Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

nvd логотип

CVE-2026-12932

Опубликовано: 30 июл. 2026
Источник: nvd
CVSS3: 8.1
EPSS Низкий

Описание

A memory leak in the tls-crypt-v2 client key extraction in OpenVPN 2.5.0 through 2.6.20 and 2.7_alpha1 through 2.7.4 allows remote attackers to cause a denial of service (memory exhaustion) via a flood of crafted packets

Уязвимые конфигурации

Конфигурация 1

Одно из

cpe:2.3:a:openvpn:openvpn:*:*:*:*:*:*:*:*
Версия от 2.5.0 (включая) до 2.6.21 (исключая)
cpe:2.3:a:openvpn:openvpn:*:*:*:*:*:*:*:*
Версия от 2.7 (включая) до 2.7.5 (исключая)

EPSS

Процентиль: 35%
0.00417
Низкий

8.1 High

CVSS3

Дефекты

CWE-401

Связанные уязвимости

CVSS3: 8.1
ubuntu
19 дней назад

A memory leak in the tls-crypt-v2 client key extraction in OpenVPN 2.5.0 through 2.6.20 and 2.7_alpha1 through 2.7.4 allows remote attackers to cause a denial of service (memory exhaustion) via a flood of crafted packets

CVSS3: 7.5
redhat
19 дней назад

A memory leak in the tls-crypt-v2 client key extraction in OpenVPN 2.5.0 through 2.6.20 and 2.7_alpha1 through 2.7.4 allows remote attackers to cause a denial of service (memory exhaustion) via a flood of crafted packets

CVSS3: 8.1
debian
19 дней назад

A memory leak in the tls-crypt-v2 client key extraction in OpenVPN 2.5 ...

CVSS3: 8.1
github
19 дней назад

A memory leak in the tls-crypt-v2 client key extraction in OpenVPN 2.5.0 through 2.6.20 and 2.7_alpha1 through 2.7.4 allows remote attackers to cause a denial of service (memory exhaustion) via a flood of crafted packets

suse-cvrf
7 дней назад

Security update for openvpn

EPSS

Процентиль: 35%
0.00417
Низкий

8.1 High

CVSS3

Дефекты

CWE-401