CVE-2025-13751

Low CVSS: 1.3

Interactive service agent in OpenVPN version 2.5.0 through 2.6.16 and 2.7_alpha1 through 2.7_rc2 on Windows allows a local authenticated user to connect to the service and trigger an error causing a local denial of service.

Vendor

Openvpn

Product

Openvpn

CWE

CWE-770

Yayın Tarihi

2025-12-03 17:15:49

Güncelleme

2026-01-30 18:43:57

Source Identifier

security@openvpn.net

KEV Date Added

Kategoriler

CWE-770 Openvpn LOW Openvpn 2025

Referanslar

https://community.openvpn.net/Security%20Announcements/CVE-2025-13751 https://www.mail-archive.com/openvpn-announce@lists.sourceforge.net/msg00153.html https://www.mail-archive.com/openvpn-announce@lists.sourceforge.net/msg00154.html

Benzer Kayıtlar

Medium

CVE-2025-13086

Improper validation of source IP addresses in OpenVPN version 2.6.0 through 2.6.15 and 2.7_alpha1 through 2.7_rc1 allows…

Critical

CVE-2025-12106

Insufficient argument validation in OpenVPN 2.7_alpha1 through 2.7_rc1 allows an attacker to trigger a heap buffer over-…

Medium

CVE-2025-50054

Buffer overflow in OpenVPN ovpn-dco-win version 1.3.0 and earlier and version 2.5.8 and earlier allows a local user proc…

Medium

CVE-2025-3908

The configuration initialization tool in OpenVPN 3 Linux v20 through v24 on Linux allows a local attacker to use symlink…

High

CVE-2024-4877

OpenVPN version 2.4.0 through 2.6.10 on Windows allows an external, lesser privileged process to create a named pipe whi…

High

CVE-2025-2704

OpenVPN version 2.6.1 through 2.6.13 in server mode using TLS-crypt-v2 allows remote attackers to trigger a denial of se…