Описание
Security update for openvpn
This update for openvpn fixes the following issues:
- CVE-2026-11771: NTLM proxy auth stack off-by-one write (bsc#1273126).
- CVE-2026-12932: memory leak using --tls-crypt-v2 (bsc#1273127).
- CVE-2026-12996: Potential DoS and memory leak via TLS session use-after-free (bsc#1273128).
- CVE-2026-13117: Heap use-after-free via incomplete guard in check_session_buf_not_used() (bsc#1273129).
- CVE-2026-13379: Windows interactive service DNS SearchList state pollution (bsc#1273130).
- CVE-2026-35058: improper validation of packet length can lead to a denial of service (bsc#1267945).
- CVE-2026-40215: race condition during TLS session promotion can lead to a use-after-free (bsc#1267944).
Список пакетов
SUSE Linux Enterprise Module for Basesystem 15 SP7
SUSE Linux Enterprise Server 15 SP6-LTSS
SUSE Linux Enterprise Server for SAP Applications 15 SP6
Ссылки
- Link for SUSE-SU-2026:3596-1
- E-Mail link for SUSE-SU-2026:3596-1
- SUSE Security Ratings
- SUSE Bug 1267944
- SUSE Bug 1267945
- SUSE Bug 1273126
- SUSE Bug 1273127
- SUSE Bug 1273128
- SUSE Bug 1273129
- SUSE Bug 1273130
- SUSE CVE CVE-2026-11771 page
- SUSE CVE CVE-2026-12932 page
- SUSE CVE CVE-2026-12996 page
- SUSE CVE CVE-2026-13117 page
- SUSE CVE CVE-2026-13379 page
- SUSE CVE CVE-2026-35058 page
- SUSE CVE CVE-2026-40215 page
Описание
OpenVPN version 2.1.0 through 2.6.20 and 2.7_alpha1 through 2.7.4 allows attackers via an off-by-one buffer write in the NTLM proxy authentication to potentially cause a crash via a crafted NTLM response from a malicious proxy server
Затронутые продукты
Ссылки
- CVE-2026-11771
- SUSE Bug 1273126
Описание
A memory leak in the tls-crypt-v2 client key extraction in OpenVPN 2.5.0 through 2.6.20 and 2.7_alpha1 through 2.7.4 allows remote attackers to cause a denial of service (memory exhaustion) via a flood of crafted packets
Затронутые продукты
Ссылки
- CVE-2026-12932
- SUSE Bug 1273127
Описание
A use-after-free in OpenVPN 2.6.0 through 2.6.20 and 2.7_alpha1 through 2.7.4 allows remote authenticated peers to potentially cause a denial of service or leak memory via crafted packets during TLS session promotion or expiry
Затронутые продукты
Ссылки
- CVE-2026-12996
- SUSE Bug 1273128
Описание
An incomplete guard in OpenVPN 2.6.0 through 2.6.20 and 2.7_alpha1 through 2.7.4 allows remote authenticated peers to trigger a use-after-free during TLS session promotion, potentially leading to a denial of service or memory leakage
Затронутые продукты
Ссылки
- CVE-2026-13117
- SUSE Bug 1273129
Описание
The Windows interactive service in OpenVPN 2.7_alpha1 through 2.7.4 allows remote attackers to cause persistent DNS state pollution or a service crash via a crafted search domain during the disconnection process
Затронутые продукты
Ссылки
- CVE-2026-13379
- SUSE Bug 1273130
Описание
Improper validation of packet length during tls-crypt-v2 key extraction in OpenVPN 2.6.0 through 2.6.19 and 2.7_alpha1 through 2.7.1 allows authenticated attackers to trigger a fatal assertion and cause a denial of service via a specially crafted packet.
Затронутые продукты
Ссылки
- CVE-2026-35058
- SUSE Bug 1267945
Описание
A race condition in OpenVPN 2.6.0 through 2.6.19 and 2.7_alpha1 through 2.7.1 allows remote attackers to potentially cause a server crash or leak heap memory via a use-after-free triggered during TLS session promotion.
Затронутые продукты
Ссылки
- CVE-2026-40215
- SUSE Bug 1267944