Описание
Security update for openvpn
This update for openvpn fixes the following issues:
- CVE-2026-11771: NTLM proxy auth stack off-by-one write (bsc#1273126).
- CVE-2026-12932: memory leak using --tls-crypt-v2 (bsc#1273127).
- CVE-2026-12996: Potential DoS and memory leak via TLS session use-after-free (bsc#1273128).
- CVE-2026-13117: Heap use-after-free via incomplete guard in check_session_buf_not_used() (bsc#1273129).
- CVE-2026-13379: Windows interactive service DNS SearchList state pollution (bsc#1273130).
- CVE-2026-35058: improper validation of packet length can lead to a denial of service (bsc#1267945).
- CVE-2026-40215: race condition during TLS session promotion can lead to a use-after-free (bsc#1267944).
- CVE-2026-63650: OpenVPN 2.7_alpha1 through 2.7.5 using mbedTLS allows remote authenticated users to be misidentified by ignoring the configured X.509 username identity lookup field (bsc#1275310).
- CVE-2026-84732: Remote Denial of Service via crafted ACK packets (bsc#1279613).
Список пакетов
openSUSE Leap 16.0
Ссылки
- SUSE Security Ratings
- SUSE Bug 1267944
- SUSE Bug 1267945
- SUSE Bug 1273126
- SUSE Bug 1273127
- SUSE Bug 1273128
- SUSE Bug 1273129
- SUSE Bug 1273130
- SUSE Bug 1275310
- SUSE Bug 1279613
- SUSE CVE CVE-2026-11771 page
- SUSE CVE CVE-2026-12932 page
- SUSE CVE CVE-2026-12996 page
- SUSE CVE CVE-2026-13117 page
- SUSE CVE CVE-2026-13379 page
- SUSE CVE CVE-2026-35058 page
- SUSE CVE CVE-2026-40215 page
- SUSE CVE CVE-2026-63650 page
- SUSE CVE CVE-2026-84732 page
Описание
OpenVPN version 2.1.0 through 2.6.20 and 2.7_alpha1 through 2.7.4 allows attackers via an off-by-one buffer write in the NTLM proxy authentication to potentially cause a crash via a crafted NTLM response from a malicious proxy server
Затронутые продукты
Ссылки
- CVE-2026-11771
- SUSE Bug 1273126
Описание
A memory leak in the tls-crypt-v2 client key extraction in OpenVPN 2.5.0 through 2.6.20 and 2.7_alpha1 through 2.7.4 allows remote attackers to cause a denial of service (memory exhaustion) via a flood of crafted packets
Затронутые продукты
Ссылки
- CVE-2026-12932
- SUSE Bug 1273127
Описание
A use-after-free in OpenVPN 2.6.0 through 2.6.20 and 2.7_alpha1 through 2.7.4 allows remote authenticated peers to potentially cause a denial of service or leak memory via crafted packets during TLS session promotion or expiry
Затронутые продукты
Ссылки
- CVE-2026-12996
- SUSE Bug 1273128
- SUSE Bug 1285646
Описание
An incomplete guard in OpenVPN 2.6.0 through 2.6.20 and 2.7_alpha1 through 2.7.4 allows remote authenticated peers to trigger a use-after-free during TLS session promotion, potentially leading to a denial of service or memory leakage
Затронутые продукты
Ссылки
- CVE-2026-13117
- SUSE Bug 1273129
Описание
The Windows interactive service in OpenVPN 2.7_alpha1 through 2.7.4 allows remote attackers to cause persistent DNS state pollution or a service crash via a crafted search domain during the disconnection process
Затронутые продукты
Ссылки
- CVE-2026-13379
- SUSE Bug 1273130
Описание
Improper validation of packet length during tls-crypt-v2 key extraction in OpenVPN 2.6.0 through 2.6.19 and 2.7_alpha1 through 2.7.1 allows authenticated attackers to trigger a fatal assertion and cause a denial of service via a specially crafted packet.
Затронутые продукты
Ссылки
- CVE-2026-35058
- SUSE Bug 1267945
Описание
A race condition in OpenVPN 2.6.0 through 2.6.19 and 2.7_alpha1 through 2.7.1 allows remote attackers to potentially cause a server crash or leak heap memory via a use-after-free triggered during TLS session promotion.
Затронутые продукты
Ссылки
- CVE-2026-40215
- SUSE Bug 1267944
Описание
OpenVPN 2.7_alpha1 through 2.7.5 using mbedTLS allows remote authenticated users to be misidentified by ignoring the configured X.509 username identity lookup field
Затронутые продукты
Ссылки
- CVE-2026-63650
- SUSE Bug 1275310
Описание
Retransmissions of ACK packet ID in OpenVPN through 2.6.22 and 2.7.6 allow remote unauthenticated attackers to cause a denial of service via crafted inputs that trigger a timeout integer overflow
Затронутые продукты
Ссылки
- CVE-2026-84732
- SUSE Bug 1279613