Summary
It was discovered that OpenVPN incorrectly handled certain malformed
packets. A remote attacker could possibly use this issue to cause OpenVPN
to crash, resulting in a denial of service.
Fixed packages 1
| Release | Package | Fixed in |
|---|---|---|
| Ubuntu · 24.04 LTS 24.04:LTS | openvpn | 2.6.12-0ubuntu0.24.04.3 |
Vulnerabilities 1
-
High 7.5
OpenVPN version 2.6.1 through 2.6.13 in server mode using TLS-crypt-v2 allows remote attackers to trigger a denial of s…
References
-
report
https://ubuntu.com/security/CVE-2025-2704