PT-2025-47577 · Openvpn+4 · Openvpn+4
CVE-2025-13086
·
Publicado
2025-11-17
·
Atualizado
2026-04-15
CVSS v3.1
7.5
Alta
| Vetor | AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H |
Name of the Vulnerable Software and Affected Versions
OpenVPN versions prior to 2.6.16
Description
The
memcmp() function in OpenVPN has an issue related to the use of a cryptographic algorithm with flaws when processing HMAC requests. Successful exploitation could allow a remote attacker to gain unauthorized access to protected information.Recommendations
Update to version 2.6.16 or later.
Exploit
Correção
DoS
Inadequate Encryption Strength
Use of a Broken Cryptographic Algorithm
Session Fixation
Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
Identificadores relacionados
Produtos afetados
Debian
Linuxmint
Openvpn
Red Os
Ubuntu