Approved changes feed: RSS · Atom
cpe:2.3:a:openvpn:openvpn:*:*:*:*:*:*:*:*
part: a version: * update: *
| Vendor | Openvpn (69250643-f594-58ab-9395-086994cbe5f3) |
|---|---|
| Product | Openvpn (cff78dd9-2909-5405-93d7-f62ace8a52df) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from purl2cpe mapping |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
pkg:deb/debian/openvpn |
purl2cpe | 2026-06-01 10:12:10.762360 |
pkg:deb/ubuntu/openvpn |
purl2cpe | 2026-06-01 10:12:10.762362 |
pkg:github/openvpn/openvpn |
purl2cpe | 2026-06-01 10:12:10.762364 |
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2026-40215 |
vulnerable | 2026-07-29 00:49:29.519227 |
Details available
A race condition in OpenVPN 2.6.0 through 2.6.19 and 2.7_alpha1 through 2.7.1 allows remote attackers to potentially cause a server crash or leak heap memory via a use-after-free triggered during TLS session promotion.
Published: 2026-06-08T19:59:20.481Z
Updated: 2026-06-16T12:24:37.681Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-35058 |
vulnerable | 2026-07-29 00:43:25.003076 |
Details available
Improper validation of packet length during tls-crypt-v2 key extraction in OpenVPN 2.6.0 through 2.6.19 and 2.7_alpha1 through 2.7.1 allows authenticated attackers to trigger a fatal assertion and cause a denial of service via a specially crafted packet.
Published: 2026-06-08T19:29:56.309Z
Updated: 2026-06-08T19:49:17.361Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-13698 |
vulnerable | 2026-07-29 00:23:33.228933 |
Details available
A memory leak in OpenVPN version 2.5.0 through 2.5.11, 2.6.0 through 2.6.20 and 2.7_alpha1 through 2.7.4 allows remote attackers with a valid tls-crypt-v2 client key to potentially cause a denial of service
Published: 2026-07-06T14:13:49.479Z
Updated: 2026-07-06T15:28:16.081Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-13122 |
vulnerable | 2026-07-29 00:23:32.825456 |
Details available
OpenVPN version 2.6.0 through 2.6.20 and 2.7_alpha1 through 2.7.4 allows remote attackers to cause a denial of service via a malformed authentication token that triggers a reachable assertion when external-auth is enabled
Published: 2026-07-06T14:32:29.371Z
Updated: 2026-07-06T15:51:50.731Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-2704 |
vulnerable | 2026-06-08 07:16:58.105496 |
Details available
OpenVPN version 2.6.1 through 2.6.13 in server mode using TLS-crypt-v2 allows remote attackers to trigger a denial of service by corrupting and replaying network packets in the early handshake phase
Published: 2025-04-02T21:00:58.582Z
Updated: 2025-10-23T10:53:34.373Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-15497 |
vulnerable | 2026-06-08 07:06:36.312883 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-13751 |
vulnerable | 2026-06-08 07:06:32.622501 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-13086 |
vulnerable | 2026-06-08 07:04:31.543090 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-12106 |
vulnerable | 2026-06-08 07:04:29.692911 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-10680 |
vulnerable | 2026-06-08 07:02:27.308337 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-5594 |
vulnerable | 2026-06-08 06:56:16.639816 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-4877 |
vulnerable | 2026-06-08 06:50:18.840249 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-28882 |
vulnerable | 2026-06-08 06:33:27.794374 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-24974 |
vulnerable | 2026-06-08 06:29:42.128993 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2023-7235 |
vulnerable | 2026-06-08 06:21:57.360469 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2022-0547 |
vulnerable | 2026-06-08 05:39:10.273369 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2021-3606 |
vulnerable | 2026-06-08 05:33:53.085036 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2020-20813 |
vulnerable | 2026-06-08 05:22:30.563603 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2020-15078 |
vulnerable | 2026-06-08 05:19:25.217554 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2020-11810 |
vulnerable | 2026-06-08 05:17:54.874468 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2018-9336 |
vulnerable | 2026-06-08 05:12:08.041626 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2018-7544 |
vulnerable | 2026-06-08 05:12:03.843986 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2017-7522 |
vulnerable | 2026-06-08 05:09:56.377793 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2017-7521 |
vulnerable | 2026-06-08 05:09:56.377280 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2017-7520 |
vulnerable | 2026-06-08 05:09:56.376719 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2017-7508 |
vulnerable | 2026-06-08 05:09:56.300789 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2017-7479 |
vulnerable | 2026-06-08 05:09:56.031952 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2017-12166 |
vulnerable | 2026-06-08 05:08:45.431643 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2016-6329 |
vulnerable | 2026-06-08 05:07:59.628262 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2013-2061 |
vulnerable | 2026-06-08 05:03:58.206398 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.