Approved changes feed: RSS · Atom

cpe:2.3:a:openvpn:openvpn3linux:*:*:*:*:*:*:*:*

part: a version: * update: *

VendorOpenvpn (69250643-f594-58ab-9395-086994cbe5f3)
ProductOpenvpn3Linux (23a3fc13-af15-56f3-b3b0-e19879f3d366)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from purl2cpe mapping

PURL mappings

PURLSourceLast updated
pkg:github/openvpn/openvpn3-linux purl2cpe 2026-06-01 10:12:10.679404
pkg:rpm/opensuse/openvpn3-linux purl2cpe 2026-06-01 10:12:10.679405

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2025-3908 vulnerable 2026-06-03 15:01:05.920769 Details available
The configuration initialization tool in OpenVPN 3 Linux v20 through v24 on Linux allows a local attacker to use symlinks pointing at an arbitrary directory which will change the ownership and permissions of that destination directory.
Published: 2025-05-19T14:59:08.482Z
Updated: 2025-05-20T18:04:08.335Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.