PT-2026-57336 · Openvpn+2 · Openvpn+2
CVE-2026-12932
·
Published
2026-07-02
·
Updated
2026-08-12
CVSS v3.1
8.1
High
| Vector | AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H |
Name of the Vulnerable Software and Affected Versions
OpenVPN versions 2.5.0 through 2.6.20
OpenVPN versions 2.7 alpha1 through 2.7.4
Description
A memory leak exists in the tls-crypt-v2 client key extraction process. This flaw allows remote attackers to trigger a denial of service through memory exhaustion by sending a flood of crafted packets, resulting in a metadata buffer leak.
Recommendations
At the moment, there is no information about a newer version that contains a fix for this vulnerability.
Exploit
DoS
Memory Leak
Found an issue in the description? Have something to add? Feel free to write us 👾
Weakness Enumeration
Related Identifiers
Affected Products
Linuxmint
Openvpn
Ubuntu