openvpn vulnerabilities (Ubuntu)
30 vulnerabilities.
-
openvpnUbuntu Improper certificate validation in the OpenVPN 3 Core library version 3.4 through 3.11.7 allows... 6.3 Medium -
openvpnUbuntu OpenVPN 2.7_alpha1 through 2.7.7 allows remote authenticated users to impersonate others via a... 7.6 High -
openvpnUbuntu Retransmissions of ACK packet ID in OpenVPN through 2.6.22 and 2.7.6 allow remote unauthenticated... 8.7 High -
openvpnUbuntu The fix for CVE-2026-12996 was incomplete. A use-after-free in OpenVPN 2.6.0 through 2.6.22 and 2... 7.2 High -
openvpnUbuntu OpenVPN version 2.6.0 through 2.6.20 and 2.7_alpha1 through 2.7.4 allows remote attackers to... 5.9 Medium -
openvpnUbuntu A memory leak in OpenVPN version 2.5.0 through 2.5.11, 2.6.0 through 2.6.20 and 2.7_alpha1... 6.0 Medium -
openvpnUbuntu An incomplete guard in OpenVPN 2.6.0 through 2.6.20 and 2.7_alpha1 through 2.7.4 allows remote... 6.0 Medium -
openvpnUbuntu A use-after-free in OpenVPN 2.6.0 through 2.6.20 and 2.7_alpha1 through 2.7.4 allows remote... 6.0 Medium -
openvpnUbuntu A memory leak in the tls-crypt-v2 client key extraction in OpenVPN 2.5.0 through 2.6.20 and 2... 7.1 High -
openvpnUbuntu OpenVPN version 2.1.0 through 2.6.20 and 2.7_alpha1 through 2.7.4 allows attackers via an off-by... 7.0 High -
openvpnUbuntu A race condition in OpenVPN 2.6.0 through 2.6.19 and 2.7_alpha1 through 2.7.1 allows remote... 6.1 Medium -
openvpnUbuntu Improper validation of packet length during tls-crypt-v2 key extraction in OpenVPN 2.6.0 through... 6.9 Medium -
openvpnUbuntu Improper validation of source IP addresses in OpenVPN version 2.6.0 through 2.7_rc1 allows an... 4.6 Medium -
openvpnUbuntu OpenVPN version 2.6.1 through 2.6.13 in server mode using TLS-crypt-v2 allows remote attackers to... 7.5 High -
openvpnUbuntu OpenVPN before 2.6.11 does not santize PUSH_REPLY messages properly which attackers can use to... 9.1 Critical -
openvpnUbuntu OpenVPN 2.6.10 and earlier in a server role accepts multiple exit notifications from... 4.3 Medium -
openvpnUbuntu DHCP routing options can manipulate interface-based VPN traffic 7.6 High -
openvpnUbuntu openvpn vulnerabilities No score -
openvpnUbuntu Control Channel in OpenVPN 2.4.7 and earlier allows remote attackers to cause a denial of service... 7.5 High -
openvpnUbuntu OpenVPN 2.1 until v2.4.12 and v2.5.6 may enable authentication bypass in external authentication... 9.8 Critical -
openvpnUbuntu OpenVPN 2.5.1 and earlier versions allows a remote attackers to bypass authentication and access... 7.5 High -
openvpnUbuntu An issue was discovered in OpenVPN 2.4.x before 2.4.9. An attacker can inject a data channel v2 ... 3.7 Low -
openvpnUbuntu ** DISPUTED ** A cross-protocol scripting issue was discovered in the management interface in... 9.1 Critical -
openvpnUbuntu OpenVPN versions before 2.3.3 and 2.4.x before 2.4.4 are vulnerable to a buffer overflow... 9.8 Critical -
openvpnUbuntu OpenVPN versions before 2.4.3 and before 2.3.17 are vulnerable to remote denial-of-service due to... 5.9 Medium -
openvpnUbuntu OpenVPN versions before 2.4.3 and before 2.3.17 are vulnerable to denial-of-service and/or... 7.4 High -
openvpnUbuntu OpenVPN versions before 2.4.3 and before 2.3.17 are vulnerable to remote denial-of-service when... 7.5 High -
openvpnUbuntu OpenVPN versions before 2.3.15 and before 2.4.2 are vulnerable to reachable assertion when packet... 6.5 Medium -
openvpnUbuntu OpenVPN, when using a 64-bit block cipher, makes it easier for remote attackers to obtain... 5.9 Medium -
openvpnUbuntu OpenVPN 2.x before 2.0.11, 2.1.x, 2.2.x before 2.2.3, and 2.3.x before 2.3.6 allows remote... 6.8 Medium