PT-2026-55933 · Openvpn+2 · Openvpn+2
CVE-2026-13698
·
Published
2026-07-06
·
Updated
2026-07-30
CVSS v3.1
9.1
Critical
| Vector | AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H |
Name of the Vulnerable Software and Affected Versions
OpenVPN versions 2.5.0 through 2.5.11
OpenVPN versions 2.6.0 through 2.6.20
OpenVPN versions 2.7 alpha1 through 2.7.4
Description
A memory leak exists that allows remote attackers possessing a valid tls-crypt-v2 client key to potentially trigger a denial of service. A memory leak occurs when a program fails to release memory it no longer needs, eventually exhausting available system resources.
Recommendations
At the moment, there is no information about a newer version that contains a fix for this vulnerability.
Exploit
DoS
Memory Leak
Allocation of Resources Without Limits
Found an issue in the description? Have something to add? Feel free to write us 👾
Related Identifiers
Affected Products
Linuxmint
Openvpn
Ubuntu