openvpn vulnerabilities (Debian)
41 vulnerabilities.
-
openvpnDebian OpenVPN 2.7_alpha1 through 2.7.7 allows remote authenticated users to impersonate others via a... 7.6 High -
openvpnDebian An integer underflow in OpenVPN version 2.7_alpha3 through 2.7.7 on Windows and Android allows... 7.1 High -
openvpnDebian Retransmissions of ACK packet ID in OpenVPN through 2.6.22 and 2.7.6 allow remote unauthenticated... 8.7 High -
openvpnDebian The fix for CVE-2026-12996 was incomplete. A use-after-free in OpenVPN 2.6.0 through 2.6.22 and 2... 7.2 High -
openvpnDebian OpenVPN 2.7_alpha1 through 2.7.5 using mbedTLS allows remote authenticated users to be... 2.0 Low -
openvpnDebian OpenVPN version 2.6.0 through 2.6.20 and 2.7_alpha1 through 2.7.4 allows remote attackers to... 5.9 Medium -
openvpnDebian A memory leak in OpenVPN version 2.5.0 through 2.5.11, 2.6.0 through 2.6.20 and 2.7_alpha1... 6.0 Medium -
openvpnDebian An incomplete guard in OpenVPN 2.6.0 through 2.6.20 and 2.7_alpha1 through 2.7.4 allows remote... 6.0 Medium -
openvpnDebian A use-after-free in OpenVPN 2.6.0 through 2.6.20 and 2.7_alpha1 through 2.7.4 allows remote... 6.0 Medium -
openvpnDebian A memory leak in the tls-crypt-v2 client key extraction in OpenVPN 2.5.0 through 2.6.20 and 2... 7.1 High -
openvpnDebian OpenVPN version 2.1.0 through 2.6.20 and 2.7_alpha1 through 2.7.4 allows attackers via an off-by... 7.0 High -
openvpnDebian A race condition in OpenVPN 2.6.0 through 2.6.19 and 2.7_alpha1 through 2.7.1 allows remote... 6.1 Medium -
openvpnDebian Improper validation of packet length during tls-crypt-v2 key extraction in OpenVPN 2.6.0 through... 6.9 Medium -
openvpnDebian Insufficient epoch key slot processing in OpenVPN 2.7_alpha1 through 2.7_rc5 allows remote... 3.8 Low -
openvpnDebian Improper validation of source IP addresses in OpenVPN version 2.6.0 through 2.7_rc1 allows an... 4.6 Medium -
openvpnDebian openvpn - regression update No score -
openvpnDebian OpenVPN version 2.6.1 through 2.6.13 in server mode using TLS-crypt-v2 allows remote attackers to... 7.5 High -
openvpnDebian OpenVPN before 2.6.11 does not santize PUSH_REPLY messages properly which attackers can use to... 9.1 Critical -
openvpnDebian OpenVPN 2.6.10 and earlier in a server role accepts multiple exit notifications from... 4.3 Medium -
openvpnDebian Use after free in OpenVPN version 2.6.0 to 2.6.6 may lead to undefined behavoir, leaking memory... 9.8 Critical -
openvpnDebian Using the --fragment option in certain configuration setups OpenVPN version 2.6.0 to 2.6.6 allows... 7.5 High -
openvpnDebian OpenVPN 2.1 until v2.4.12 and v2.5.6 may enable authentication bypass in external authentication... 9.8 Critical -
openvpnDebian OpenVPN 2.5.1 and earlier versions allows a remote attackers to bypass authentication and access... 7.5 High -
openvpnDebian An issue was discovered in OpenVPN 2.4.x before 2.4.9. An attacker can inject a data channel v2 ... 3.7 Low -
openvpnDebian OpenVPN versions before 2.3.3 and 2.4.x before 2.4.4 are vulnerable to a buffer overflow... 9.8 Critical -
openvpnDebian OpenVPN versions before 2.4.3 and before 2.3.17 are vulnerable to denial-of-service by... 6.5 Medium -
openvpnDebian OpenVPN versions before 2.4.3 and before 2.3.17 are vulnerable to remote denial-of-service due to... 5.9 Medium -
openvpnDebian OpenVPN versions before 2.4.3 and before 2.3.17 are vulnerable to denial-of-service and/or... 7.4 High -
openvpnDebian OpenVPN versions before 2.4.3 and before 2.3.17 are vulnerable to remote denial-of-service when... 7.5 High -
openvpnDebian OpenVPN version 2.3.12 and newer is vulnerable to unauthenticated Denial of Service of server via... 7.5 High -
openvpnDebian OpenVPN versions before 2.3.15 and before 2.4.2 are vulnerable to reachable assertion when packet... 6.5 Medium -
openvpnDebian OpenVPN 2.x before 2.0.11, 2.1.x, 2.2.x before 2.2.3, and 2.3.x before 2.3.6 allows remote... 6.8 Medium -
openvpnDebian The openvpn_decrypt function in crypto.c in OpenVPN 2.3.0 and earlier, when running in UDP mode,... 2.6 Low -
openvpnDebian Unspecified vulnerability in OpenVPN 2.1-beta14 through 2.1-rc8, when running on non-Windows... 7.6 High -
openvpnDebian OpenVPN 2.0 through 2.0.5 allows remote malicious servers to execute arbitrary code on the client... 9.0 High -
openvpnDebian OpenVPN 2.x before 2.0.4, when running in TCP mode, allows remote attackers to cause a denial of... 5.0 Medium -
openvpnDebian Format string vulnerability in the foreign_option function in options.c for OpenVPN 2.0.x allows... 7.5 High -
openvpnDebian Race condition in OpenVPN before 2.0.1, when --duplicate-cn is not enabled, allows remote... 2.6 Low -
openvpnDebian OpenVPN before 2.0.1, when running in "dev tap" Ethernet bridging mode, allows remote... 2.1 Low -
openvpnDebian OpenVPN before 2.0.1 does not properly flush the OpenSSL error queue when a packet can not be... 5.0 Medium -
openvpnDebian OpenVPN before 2.0.1, when running with "verb 0" and without TLS authentication, does not... 5.0 Medium