Approved changes feed: RSS · Atom
cpe:2.3:a:openvpn:openvpn:*:*:*:*:community:*:*:*
part: a version: * update: *
| Vendor | Openvpn (69250643-f594-58ab-9395-086994cbe5f3) |
|---|---|
| Product | Openvpn (cff78dd9-2909-5405-93d7-f62ace8a52df) |
| Edition | * |
| Language | * |
| Software edition | community |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from purl2cpe mapping |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
pkg:deb/debian/openvpn |
purl2cpe | 2026-06-01 10:12:11.080395 |
pkg:deb/ubuntu/openvpn |
purl2cpe | 2026-06-01 10:12:11.080396 |
pkg:github/openvpn/openvpn |
purl2cpe | 2026-06-01 10:12:11.080398 |
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2025-2704 |
vulnerable | 2026-06-08 07:16:58.106410 |
Details available
OpenVPN version 2.6.1 through 2.6.13 in server mode using TLS-crypt-v2 allows remote attackers to trigger a denial of service by corrupting and replaying network packets in the early handshake phase
Published: 2025-04-02T21:00:58.582Z
Updated: 2025-10-23T10:53:34.373Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-13751 |
vulnerable | 2026-06-08 07:06:32.623567 |
Details available
Interactive service agent in OpenVPN version 2.5.0 through 2.6.16 and 2.7_alpha1 through 2.7_rc2 on Windows allows a local authenticated user to connect to the service and trigger an error causing a local denial of service.
Published: 2025-12-03T16:22:35.771Z
Updated: 2025-12-12T13:56:20.684Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-13086 |
vulnerable | 2026-06-08 07:04:31.544132 |
Details available
Improper validation of source IP addresses in OpenVPN version 2.6.0 through 2.6.15 and 2.7_alpha1 through 2.7_rc1 allows an attacker to open a session from a different IP address which did not initiate the connection resulting in a denial of service for the originating client
Published: 2025-12-03T19:54:10.737Z
Updated: 2025-12-12T13:50:46.678Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-5594 |
vulnerable | 2026-06-08 06:56:16.640897 |
Details available
OpenVPN before 2.6.11 does not santize PUSH_REPLY messages properly which an attacker controlling the server can use to inject unexpected arbitrary data ending up in client logs.
Published: 2025-01-06T13:52:20.272Z
Updated: 2025-11-03T20:48:53.705Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-4877 |
vulnerable | 2026-06-08 06:50:18.841231 |
Details available
OpenVPN version 2.4.0 through 2.6.10 on Windows allows an external, lesser privileged process to create a named pipe which the OpenVPN GUI component would connect to allowing it to escalate its privileges
Published: 2025-04-03T15:11:51.057Z
Updated: 2025-04-04T13:25:17.430Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-28882 |
vulnerable | 2026-06-08 06:33:27.794427 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-27903 |
vulnerable | 2026-06-08 06:33:24.998307 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-27459 |
vulnerable | 2026-06-08 06:31:28.983004 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-24974 |
vulnerable | 2026-06-08 06:29:42.131346 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2023-46850 |
vulnerable | 2026-06-08 06:14:23.591503 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2023-46849 |
vulnerable | 2026-06-08 06:14:23.586852 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.