Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

nvd логотип

CVE-2026-40215

Опубликовано: 08 июн. 2026
Источник: nvd
CVSS3: 7.4
EPSS Низкий

Описание

A race condition in OpenVPN 2.6.0 through 2.6.19 and 2.7_alpha1 through 2.7.1 allows remote attackers to potentially cause a server crash or leak heap memory via a use-after-free triggered during TLS session promotion.

Уязвимые конфигурации

Конфигурация 1

Одно из

cpe:2.3:a:openvpn:openvpn:*:*:*:*:*:*:*:*
Версия от 2.6.0 (включая) до 2.6.20 (исключая)
cpe:2.3:a:openvpn:openvpn:*:*:*:*:*:*:*:*
Версия от 2.7 (включая) до 2.7.2 (исключая)

EPSS

Процентиль: 46%
0.00591
Низкий

7.4 High

CVSS3

Дефекты

CWE-125

Связанные уязвимости

CVSS3: 7.4
ubuntu
4 месяца назад

A race condition in OpenVPN 2.6.0 through 2.6.19 and 2.7_alpha1 through 2.7.1 allows remote attackers to potentially cause a server crash or leak heap memory via a use-after-free triggered during TLS session promotion.

CVSS3: 6.5
redhat
4 месяца назад

A race condition in OpenVPN 2.6.0 through 2.6.19 and 2.7_alpha1 through 2.7.1 allows remote attackers to potentially cause a server crash or leak heap memory via a use-after-free triggered during TLS session promotion.

CVSS3: 7.4
debian
4 месяца назад

A race condition in OpenVPN 2.6.0 through 2.6.19 and 2.7_alpha1 throug ...

CVSS3: 7.4
github
4 месяца назад

A race condition in OpenVPN 2.6.0 through 2.6.19 and 2.7_alpha1 through 2.7.1 allows remote attackers to potentially cause a server crash or leak heap memory via a use-after-free triggered during TLS session promotion.

suse-cvrf
около 2 месяцев назад

Security update for openvpn

EPSS

Процентиль: 46%
0.00591
Низкий

7.4 High

CVSS3

Дефекты

CWE-125