Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

redhat логотип

CVE-2026-13117

Опубликовано: 30 июл. 2026
Источник: redhat
CVSS3: 5.9

Описание

An incomplete guard in OpenVPN 2.6.0 through 2.6.20 and 2.7_alpha1 through 2.7.4 allows remote authenticated peers to trigger a use-after-free during TLS session promotion, potentially leading to a denial of service or memory leakage

A flaw was found in OpenVPN. An incomplete guard allows remote authenticated peers to trigger a use-after-free vulnerability during TLS (Transport Layer Security) session promotion. This can lead to a denial of service, making the service unavailable, or memory leakage, which could potentially expose sensitive information.

Отчет

Moderate: This flaw in OpenVPN allows a remote authenticated peer to trigger a use-after-free during TLS session promotion, leading to a denial of service or memory leakage. The high attack complexity and requirement for prior authentication limit the immediate risk, but successful exploitation could disrupt VPN services or expose sensitive information.

Дополнительная информация

Статус:

Moderate
Дефект:
CWE-825
https://bugzilla.redhat.com/show_bug.cgi?id=2509530OpenVPN: OpenVPN: Denial of service or memory leakage via incomplete TLS guard

5.9 Medium

CVSS3

Связанные уязвимости

CVSS3: 8.1
ubuntu
19 дней назад

An incomplete guard in OpenVPN 2.6.0 through 2.6.20 and 2.7_alpha1 through 2.7.4 allows remote authenticated peers to trigger a use-after-free during TLS session promotion, potentially leading to a denial of service or memory leakage

CVSS3: 8.1
nvd
19 дней назад

An incomplete guard in OpenVPN 2.6.0 through 2.6.20 and 2.7_alpha1 through 2.7.4 allows remote authenticated peers to trigger a use-after-free during TLS session promotion, potentially leading to a denial of service or memory leakage

CVSS3: 8.1
debian
19 дней назад

An incomplete guard in OpenVPN 2.6.0 through 2.6.20 and 2.7_alpha1 thr ...

CVSS3: 8.1
github
19 дней назад

An incomplete guard in OpenVPN 2.6.0 through 2.6.20 and 2.7_alpha1 through 2.7.4 allows remote authenticated peers to trigger a use-after-free during TLS session promotion, potentially leading to a denial of service or memory leakage

CVSS3: 9.1
fstec
около 2 месяцев назад

Уязвимость функции check_session_buf_not_used() механизма tls-crypt-v2 программного обеспечения OpenVPN, позволяющая нарушителю получить несанкционированный доступ к защищаемой информации, вызвать отказ в обслуживании или выполнить произвольный код

5.9 Medium

CVSS3