ALT-PU-2025-14844-1

Package update openvpn in branch p10_e2k

Version2.6.15-alt1

Task#0

Published2025-11-19

Max severityHIGH

Severity:

Closed issues (2)

LOW3.7

Уязвимость функции TLS-crypt-v2 сервера программного обеспечения OpenVPN, позволяющая нарушителю вызвать отказ в обслуживании

Published: 2025-04-30Modified: 2026-03-04

CVSS 3.xLOW 3.7

CVSS:3.x/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L

CVSS 2.0LOW 2.6

CVSS:2.0/AV:N/AC:H/Au:N/C:N/I:N/A:P

References

CVE-2025-2704

HIGH7.5

OpenVPN version 2.6.1 through 2.6.13 in server mode using TLS-crypt-v2 allows remote attackers to trigger a denial of service by corrupting and replaying network packets in the early handshake phase

Published: 2025-04-02Modified: 2025-10-23

CVSS 3.xHIGH 7.5

CVSS:3.x/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

References