CVE-2026-12932

A flaw was found in OpenVPN. A memory leak in the tls-crypt-v2 client key extraction allows remote attackers to cause a denial of service DoS. By sending a flood of specially crafted packets, an attacker can exhaust the system's memory, making the service unavailable...

ALPINE-CVE-2026-12932

A memory leak in the tls-crypt-v2 client key extraction in OpenVPN 2.5.0 through 2.6.20 and 2.7alpha1 through 2.7.4 allows remote attackers to cause a denial of service memory exhaustion via a flood of crafted packets...

CVE-2026-12932

CVE-2026-12932 is a memory-leak vulnerability in the tls-crypt-v2 client key extraction in OpenVPN 2.5.0–2.6.20 and 2.7_alpha1–2.7.4 that can be exploited remotely by a flood of crafted packets to cause memory exhaustion/DoS. Public advisories/OSV entries indicate fixes in later OpenVPN releases ...

CVE-2026-12932

A memory leak in the tls-crypt-v2 client key extraction in OpenVPN 2.5.0 through 2.6.20 and 2.7alpha1 through 2.7.4 allows remote attackers to cause a denial of service memory exhaustion via a flood of crafted packets...

OpenVPN TLS Crypt v2 Client Key Extraction denial of service vulnerability

Talos Vulnerability Report TALOS-2026-2381 OpenVPN TLS Crypt v2 Client Key Extraction denial of service vulnerability April 27, 2026 CVE Number CVE-2026-35058 SUMMARY A reachable assertion vulnerability exists in the TLS Crypt v2 Client Key Extraction functionality of OpenVPN 2.6.x and 2.8git. A...