CVE-2026-13379

The Windows interactive service in OpenVPN 2.7alpha1 through 2.7.4 allows remote attackers to cause persistent DNS state pollution or a service crash via a crafted search domain during the disconnection process...

CVE-2026-13379

The Windows interactive service in OpenVPN 2.7alpha1 through 2.7.4 allows remote attackers to cause persistent DNS state pollution or a service crash via a crafted search domain during the disconnection process...

CVE-2026-13379

CVE-2026-13379 affects the Windows interactive service component of OpenVPN, versions 2.7_alpha1 through 2.7.4. The vulnerability allows remote attackers to cause persistent DNS state pollution or a service crash by supplying a crafted search domain during the disconnection process. The connected...

PT-2026-66521

Name of the Vulnerable Software and Affected Versions OpenVPN versions 2.7 alpha1 through 2.7.4 Description The Windows interactive service contains a flaw that allows remote attackers to trigger a service crash or persistent DNS state pollution. This occurs when a crafted search domain is...

Security update for openvpn

This update for openvpn fixes the following issues: CVE-2026-13122: denial of service via a malformed authentication token that triggers a reachable assertion when external-auth is enabled bsc1270413. CVE-2026-13698: denial of service via memory leak triggered by remote attackers with a valid...

SUSE-SU-2026:3407-1 Security update for openvpn

This update for openvpn fixes the following issues: - CVE-2026-13122: denial of service via a malformed authentication token that triggers a reachable assertion when external-auth is enabled bsc1270413. - CVE-2026-13698: denial of service via memory leak triggered by remote attackers with a valid...

SUSE CVE-2026-64043

In the Linux kernel, the following vulnerability has been resolved: ovpn: fix race between deleting interface and adding new peer While deleting an existing ovpn interface, there is a very narrow window where adding a new peer via netlink may cause the netdevice to hang and prevent its...

SUSE CVE-2026-64045

In the Linux kernel, the following vulnerability has been resolved: ovpn: tcp - use cached peer pointer in ovpntcpclose ovpntcpclose loads the ovpnsocket via rcudereferenceskuserdata under rcureadlock, takes a reference on sock-peer, caches the peer pointer in a local, and drops the read lock. It...

CVE-2026-64043

A flaw was found in the Linux kernel's ovpn module. A race condition can occur when an ovpn interface is being deleted while a new peer is simultaneously added via netlink. This timing issue may cause the network device to become unresponsive, preventing its proper removal and leading to a denial...

Amazon Linux 2023 : openvpn, openvpn-devel (ALAS2023-2026-1990)

It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2023-2026-1990 advisory. An attacker controlling an HTTP proxy or performing MITM on the plaintext pre-TLS proxy connection can trigger a single 0-byte overrun to a buffer on the stack by sending a crafted NTLM Type 2...

Important: openvpn

Issue Overview: An attacker controlling an HTTP proxy or performing MITM on the plaintext pre-TLS proxy connection can trigger a single 0-byte overrun to a buffer on the stack by sending a crafted NTLM Type 2 challenge response. CVE-2026-11771 If the active TLS session has a pending dedicated ACK...

Linux Distros Unpatched Vulnerability : CVE-2026-64045

"The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In the Linux kernel, the following vulnerability has been resolved: ovpn: tcp - use cached peer pointer in ovpntcpclose ovpntcpclose loads the ovpnsocket via...

Linux Distros Unpatched Vulnerability : CVE-2026-64044

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In the Linux kernel, the following vulnerability has been resolved: ovpn: respect peer refcount in CMDNEWPEER error path ovpnnlpeernewdoit's error path calls...

CVE-2026-64045 ovpn: tcp - use cached peer pointer in ovpn_tcp_close()

In the Linux kernel, the following vulnerability has been resolved: ovpn: tcp - use cached peer pointer in ovpntcpclose ovpntcpclose loads the ovpnsocket via rcudereferenceskuserdata under rcureadlock, takes a reference on sock-peer, caches the peer pointer in a local, and drops the read lock. It...

EUVD-2026-45617

In the Linux kernel, the following vulnerability has been resolved: ovpn: respect peer refcount in CMDNEWPEER error path ovpnnlpeernewdoit's error path calls ovpnpeerrelease directly rather than ovpnpeerput, bypassing the kref. The accompanying comment "peer was not yet hashed, thus it is not use...

CVE-2026-64043 ovpn: fix race between deleting interface and adding new peer

In the Linux kernel, the following vulnerability has been resolved: ovpn: fix race between deleting interface and adding new peer While deleting an existing ovpn interface, there is a very narrow window where adding a new peer via netlink may cause the netdevice to hang and prevent its...

CVE-2026-64044

In the Linux kernel, the following vulnerability has been resolved: ovpn: respect peer refcount in CMDNEWPEER error path ovpnnlpeernewdoit's error path calls ovpnpeerrelease directly rather than ovpnpeerput, bypassing the kref. The accompanying comment "peer was not yet hashed, thus it is not use...

CVE-2026-64043

The CVE-2026-64043 entry describes a race condition in the Linux kernel related to ovpn interfaces. During deletion of an ovpn netdevice, a CMD_PEER_NEW netlink message could race with the unregistration process, taking a fresh reference to the netdev and leaving the device in a state where it ca...

CVE-2026-64044 ovpn: respect peer refcount in CMD_NEW_PEER error path

In the Linux kernel, the following vulnerability has been resolved: ovpn: respect peer refcount in CMDNEWPEER error path ovpnnlpeernewdoit's error path calls ovpnpeerrelease directly rather than ovpnpeerput, bypassing the kref. The accompanying comment "peer was not yet hashed, thus it is not use...

OESA-2026-3001 openvpn security update

OpenVPN is a full-featured open source SSL VPN solution that accommodates a wide range of configurations, including remote access, site-to-site VPNs, Wi-Fi security, and enterprise-scale remote access solutions with load balancing, failover, and fine-grained access-controls. Starting with the...