Логотип exploitDog
product: "openvpn"
Консоль
Логотип exploitDog

exploitDog

product: "openvpn"
OpenVPN

OpenVPNсвободная реализация технологии виртуальной частной сети (VPN) с открытым исходным кодом для создания зашифрованных каналoв типа точка-точка или сервер-клиенты между компьютерами.

Релизный цикл, информация об уязвимостях

Продукт: OpenVPN
Вендор: openvpn

График релизов

2.12.22.32.42.52.62009201020112012201320142015201620172018201920202021202220232024202520262027

Недавние уязвимости OpenVPN

Количество 203

github логотип

GHSA-xv5w-q5wq-r3c3

2 месяца назад

Improper validation of source IP addresses in OpenVPN version 2.6.0 through 2.7_rc1 allows an attacker to open a session from a different IP address which did not initiate the connection resulting in a denial of service for the originating client

CVSS3: 7.5
EPSS: Низкий
nvd логотип

CVE-2025-13086

2 месяца назад

Improper validation of source IP addresses in OpenVPN version 2.6.0 through 2.6.15 and 2.7_alpha1 through 2.7_rc1 allows an attacker to open a session from a different IP address which did not initiate the connection resulting in a denial of service for the originating client

CVSS3: 7.5
EPSS: Низкий
debian логотип

CVE-2025-13086

2 месяца назад

Improper validation of source IP addresses in OpenVPN version 2.6.0 th ...

CVSS3: 7.5
EPSS: Низкий
ubuntu логотип

CVE-2025-13086

2 месяца назад

Improper validation of source IP addresses in OpenVPN version 2.6.0 through 2.6.15 and 2.7_alpha1 through 2.7_rc1 allows an attacker to open a session from a different IP address which did not initiate the connection resulting in a denial of service for the originating client

CVSS3: 7.5
EPSS: Низкий
github логотип

GHSA-74jr-8vhj-2c3f

2 месяца назад

Interactive service agent in OpenVPN version 2.5.0 through 2.7_rc2 on Windows allows a local authenticated user to connect to the service and trigger an error causing a local denial of service.

CVSS3: 5.5
EPSS: Низкий
nvd логотип

CVE-2025-13751

2 месяца назад

Interactive service agent in OpenVPN version 2.5.0 through 2.6.16 and 2.7_alpha1 through 2.7_rc2 on Windows allows a local authenticated user to connect to the service and trigger an error causing a local denial of service.

CVSS3: 5.5
EPSS: Низкий
debian логотип

CVE-2025-13751

2 месяца назад

Interactive service agent in OpenVPN version 2.5.0 through 2.6.16 and ...

CVSS3: 5.5
EPSS: Низкий
github логотип

GHSA-xg3m-85r2-236x

2 месяца назад

Insufficient argument validation in OpenVPN 2.7_alpha1 through 2.7_rc1 allows an attacker to trigger a heap buffer over-read when parsing IP addresses

CVSS3: 9.1
EPSS: Низкий
nvd логотип

CVE-2025-12106

2 месяца назад

Insufficient argument validation in OpenVPN 2.7_alpha1 through 2.7_rc1 allows an attacker to trigger a heap buffer over-read when parsing IP addresses

CVSS3: 9.1
EPSS: Низкий
debian логотип

CVE-2025-12106

2 месяца назад

Insufficient argument validation in OpenVPN 2.7_alpha1 through 2.7_rc1 ...

CVSS3: 9.1
EPSS: Низкий

Уязвимостей на страницу

Уязвимость
CVSS
EPSS
Опубликовано
1
github логотип
GHSA-xv5w-q5wq-r3c3

Improper validation of source IP addresses in OpenVPN version 2.6.0 through 2.7_rc1 allows an attacker to open a session from a different IP address which did not initiate the connection resulting in a denial of service for the originating client

CVSS3: 7.5
0%
Низкий
2 месяца назад
nvd логотип
CVE-2025-13086

Improper validation of source IP addresses in OpenVPN version 2.6.0 through 2.6.15 and 2.7_alpha1 through 2.7_rc1 allows an attacker to open a session from a different IP address which did not initiate the connection resulting in a denial of service for the originating client

CVSS3: 7.5
0%
Низкий
2 месяца назад
debian логотип
CVE-2025-13086

Improper validation of source IP addresses in OpenVPN version 2.6.0 th ...

CVSS3: 7.5
0%
Низкий
2 месяца назад
ubuntu логотип
CVE-2025-13086

Improper validation of source IP addresses in OpenVPN version 2.6.0 through 2.6.15 and 2.7_alpha1 through 2.7_rc1 allows an attacker to open a session from a different IP address which did not initiate the connection resulting in a denial of service for the originating client

CVSS3: 7.5
0%
Низкий
2 месяца назад
github логотип
GHSA-74jr-8vhj-2c3f

Interactive service agent in OpenVPN version 2.5.0 through 2.7_rc2 on Windows allows a local authenticated user to connect to the service and trigger an error causing a local denial of service.

CVSS3: 5.5
0%
Низкий
2 месяца назад
nvd логотип
CVE-2025-13751

Interactive service agent in OpenVPN version 2.5.0 through 2.6.16 and 2.7_alpha1 through 2.7_rc2 on Windows allows a local authenticated user to connect to the service and trigger an error causing a local denial of service.

CVSS3: 5.5
0%
Низкий
2 месяца назад
debian логотип
CVE-2025-13751

Interactive service agent in OpenVPN version 2.5.0 through 2.6.16 and ...

CVSS3: 5.5
0%
Низкий
2 месяца назад
github логотип
GHSA-xg3m-85r2-236x

Insufficient argument validation in OpenVPN 2.7_alpha1 through 2.7_rc1 allows an attacker to trigger a heap buffer over-read when parsing IP addresses

CVSS3: 9.1
0%
Низкий
2 месяца назад
nvd логотип
CVE-2025-12106

Insufficient argument validation in OpenVPN 2.7_alpha1 through 2.7_rc1 allows an attacker to trigger a heap buffer over-read when parsing IP addresses

CVSS3: 9.1
0%
Низкий
2 месяца назад
debian логотип
CVE-2025-12106

Insufficient argument validation in OpenVPN 2.7_alpha1 through 2.7_rc1 ...

CVSS3: 9.1
0%
Низкий
2 месяца назад

Уязвимостей на страницу


Поделиться