Summary
Package updates are available for Amazon Linux 2023 that fix the following vulnerabilities: CVE-2025-2704: OpenVPN version 2.6.1 through 2.6.13 in server mode using TLS-crypt-v2 allows remote attackers to trigger a denial of service by corrupting and replaying network packets in the early handshake phase
Fixed packages 4
| Release | Package | Fixed in |
|---|---|---|
| Amazon Linux · 2023 | openvpn | 0:2.6.12-1.amzn2023.0.2 |
| Amazon Linux · 2023 | openvpn-debuginfo | 0:2.6.12-1.amzn2023.0.2 |
| Amazon Linux · 2023 | openvpn-debugsource | 0:2.6.12-1.amzn2023.0.2 |
| Amazon Linux · 2023 | openvpn-devel | 0:2.6.12-1.amzn2023.0.2 |
Vulnerabilities 1
-
High 7.5
OpenVPN version 2.6.1 through 2.6.13 in server mode using TLS-crypt-v2 allows remote attackers to trigger a denial of s…
References
-
web
https://alas.aws.amazon.com/cve/html/CVE-2025-2704.html