3059 matches found
CVE-2025-15497
CVE-2025-15497 affects OpenVPN 2.7_alpha1 through 2.7_rc5. The issue is insufficient epoch key slot processing that allows remote authenticated users to trigger an assert, resulting in a denial of service. Affected component appears to be internal key-slot handling within the OpenVPN 2.7 developm...
CVE-2025-15497
Insufficient epoch key slot processing in OpenVPN 2.7alpha1 through 2.7rc5 allows remote authenticated users to trigger an assert resulting in a denial of service...
CVE-2025-15497
Insufficient epoch key slot processing in OpenVPN 2.7alpha1 through 2.7rc5 allows remote authenticated users to trigger an assert resulting in a denial of service...
EUVD-2025-206570
Insufficient epoch key slot processing in OpenVPN 2.7alpha1 through 2.7rc5 allows remote authenticated users to trigger an assert resulting in a denial of service...
CVE-2025-15497
Insufficient epoch key slot processing in OpenVPN 2.7alpha1 through 2.7rc5 allows remote authenticated users to trigger an assert resulting in a denial of service...
CVE-2025-15497: Reachable Assertion
Insufficient epoch key slot processing in OpenVPN 2.7alpha1 through 2.7rc5 allows remote authenticated users to trigger an assert resulting in a denial of service...
OpenVPN security vulnerabilities
OpenVPN is a software package developed by OpenVPN Inc. in the United States, used to create encrypted VPN tunnels. It utilizes the OpenSSL library to encrypt data and control information, and allows the created VPNs to use public keys, electronic certificates, or username/password for...
OPENSUSE-SU-2026:20137-1 Security update for openvpn
This update for openvpn fixes the following issues: - CVE-2025-13086: Fixed improper validation of source IP addresses in OpenVPN that could lead to DoS bsc1254486...
SUSE-SU-2026:20196-1 Security update for openvpn
This update for openvpn fixes the following issues: - CVE-2025-13086: Fixed improper validation of source IP addresses in OpenVPN that could lead to DoS bsc1254486...
Linux Distros Unpatched Vulnerability : CVE-2025-15497
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Debian Linux - openvpn - None CVE-2025-15497 Note that Nessus relies on the presence of the package as reported by the vendor. %NASLMINLEVEL 80900 C Tenable, In...
CVE-2025-13751 vulnerabilities
Vulnerabilities for packages: openvpn...
GHSA-74JR-8VHJ-2C3F vulnerabilities
Vulnerabilities for packages: openvpn...
GHSA-74JR-8VHJ-2C3F vulnerabilities
Vulnerabilities for packages: openvpn...
CVE-2025-13751 vulnerabilities
Vulnerabilities for packages: openvpn...
Astra Linux – Vulnerability in OpenVPN
Improper validation of source IP addresses in OpenVPN versions 2.6.0 through 2.6.15, and 2.7alpha1 through 2.7rc1, allows an attacker to open a session from a different IP address that did not initiate the connection. This results in a denial of service for the originating client...
The vulnerability of the SAML Assertion Consumer Service (ACS) server of OpenVPN Access allows a perpetrator to execute arbitrary HTML code or web scripts.
The vulnerability of the SAML Assertion Consumer Service ACS of the OpenVPN Access server is related to the lack of security measures taken for the structure of the web page during the processing of the RelayState parameter. Exploiting this vulnerability allows a malicious actor to execute...
CVE-2018-10204
PureVPN 6.0.1 for Windows suffers from a SYSTEM privilege escalation vulnerability in its "sevpnclient" service. When configured to use the OpenVPN protocol, the "sevpnclient" service executes "openvpn.exe" using the OpenVPN config file located at %PROGRAMDATA%\purevpn\config\config.ovpn. This fi...
CVE-2018-10169
ProtonVPN 1.3.3 for Windows suffers from a SYSTEM privilege escalation vulnerability through the "ProtonVPN Service" service. This service establishes an NetNamedPipe endpoint that allows arbitrary installed applications to connect and call publicly exposed methods. The "Connect" method accepts a...