Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

ubuntu логотип

CVE-2025-13086

Опубликовано: 03 дек. 2025
Источник: ubuntu
Приоритет: medium
EPSS Низкий
CVSS3: 7.5

Описание

Improper validation of source IP addresses in OpenVPN version 2.6.0 through 2.6.15 and 2.7_alpha1 through 2.7_rc1 allows an attacker to open a session from a different IP address which did not initiate the connection resulting in a denial of service for the originating client

РелизСтатусПримечание
devel

released

2.7.0~rc5-1ubuntu5
esm-infra-legacy/trusty

not-affected

code not present
esm-infra/bionic

not-affected

esm-infra/focal

not-affected

esm-infra/xenial

not-affected

jammy

not-affected

2.5.11-0ubuntu0.22.04.1
noble

released

2.6.14-0ubuntu0.24.04.3
plucky

released

2.6.14-0ubuntu0.25.04.3
questing

released

2.6.14-2ubuntu1.1
upstream

released

2.7.0,2.6.16,2.7.0~rc2-2

Показывать по

EPSS

Процентиль: 19%
0.00061
Низкий

7.5 High

CVSS3

Связанные уязвимости

CVSS3: 6.5
redhat
4 месяца назад

Improper validation of source IP addresses in OpenVPN version 2.6.0 through 2.6.15 and 2.7_alpha1 through 2.7_rc1 allows an attacker to open a session from a different IP address which did not initiate the connection resulting in a denial of service for the originating client

CVSS3: 7.5
nvd
4 месяца назад

Improper validation of source IP addresses in OpenVPN version 2.6.0 through 2.6.15 and 2.7_alpha1 through 2.7_rc1 allows an attacker to open a session from a different IP address which did not initiate the connection resulting in a denial of service for the originating client

CVSS3: 7.5
debian
4 месяца назад

Improper validation of source IP addresses in OpenVPN version 2.6.0 th ...

suse-cvrf
около 2 месяцев назад

Security update for openvpn

suse-cvrf
20 дней назад

Security update for openvpn

EPSS

Процентиль: 19%
0.00061
Низкий

7.5 High

CVSS3