PT-2025-47577 · Openvpn+4 · Openvpn+4
CVE-2025-13086
·
Published
2025-11-17
·
Updated
2026-04-15
CVSS v3.1
7.5
High
| Vector | AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H |
Name of the Vulnerable Software and Affected Versions
OpenVPN versions prior to 2.6.16
Description
The
memcmp() function in OpenVPN has an issue related to the use of a cryptographic algorithm with flaws when processing HMAC requests. Successful exploitation could allow a remote attacker to gain unauthorized access to protected information.Recommendations
Update to version 2.6.16 or later.
Exploit
Fix
DoS
Inadequate Encryption Strength
Use of a Broken Cryptographic Algorithm
Session Fixation
Found an issue in the description? Have something to add? Feel free to write us 👾
Related Identifiers
Affected Products
Debian
Linuxmint
Openvpn
Red Os
Ubuntu