OpenVPN before 2.0.1 does not properly flush the OpenSSL error queue when a packet can…
Priority LOW 28Published · Updated
Key facts
- Attack vector
- Network
- Privileges required
- None
- User interaction
- — Not recorded in CVSS 2.0
- Attack complexity
- Low
- Impact type
- —
- Confidentiality · integrity · availability
- None · None · Partial
- Fix status
- No fix listed
Attack profile from CVSS 2.0 · NVD. Fix status from CNA.
Summary
OpenVPN before 2.0.1 does not properly flush the OpenSSL error queue when a packet can not be decrypted by the server, which allows remote authenticated attackers to cause a denial of service (client disconnection) via a large number of packets that can not be decrypted.
Why it matters now
EPSS 0.02738 86th percentileScored 2026-11-07
Fix No fix listed No fixed version in the sources yet
SSVC decision points
Not available: CISA has not published SSVC decision points for this record.
Affected products
| Vendor | Product | Affected versions | Fixed in | Status | Source |
|---|---|---|---|---|---|
| — | — | all versions | — | No fix listed | CNA |
- — Vendor— Affected all versions Fixed in — No fix listed CNA
CPE configurations NVD · 74
| CPE | Versions | Role | Vendor |
|---|---|---|---|
| cpe:2.3:a:openvpn:openvpn:2.0:*:*:*:*:*:*:* | 2.0 | Vulnerable | OpenVPN |
| cpe:2.3:a:openvpn:openvpn:2.0.1_rc1:*:*:*:*:*:*:* | 2.0.1_rc1 | Vulnerable | OpenVPN |
| cpe:2.3:a:openvpn:openvpn:2.0.1_rc2:*:*:*:*:*:*:* | 2.0.1_rc2 | Vulnerable | OpenVPN |
| cpe:2.3:a:openvpn:openvpn:2.0.1_rc3:*:*:*:*:*:*:* | 2.0.1_rc3 | Vulnerable | OpenVPN |
| cpe:2.3:a:openvpn:openvpn:2.0.1_rc4:*:*:*:*:*:*:* | 2.0.1_rc4 | Vulnerable | OpenVPN |
| cpe:2.3:a:openvpn:openvpn:2.0.1_rc5:*:*:*:*:*:*:* | 2.0.1_rc5 | Vulnerable | OpenVPN |
| cpe:2.3:a:openvpn:openvpn:2.0.1_rc6:*:*:*:*:*:*:* | 2.0.1_rc6 | Vulnerable | OpenVPN |
| cpe:2.3:a:openvpn:openvpn:2.0.1_rc7:*:*:*:*:*:*:* | 2.0.1_rc7 | Vulnerable | OpenVPN |
| cpe:2.3:a:openvpn:openvpn:2.0_beta1:*:*:*:*:*:*:* | 2.0_beta1 | Vulnerable | OpenVPN |
| cpe:2.3:a:openvpn:openvpn:2.0_beta2:*:*:*:*:*:*:* | 2.0_beta2 | Vulnerable | OpenVPN |
- cpe:2.3:a:openvpn:openvpn:2.0:*:*:*:*:*:*:* Versions 2.0 Vulnerable ·OpenVPN
- cpe:2.3:a:openvpn:openvpn:2.0.1_rc1:*:*:*:*:*:*:* Versions 2.0.1_rc1 Vulnerable ·OpenVPN
- cpe:2.3:a:openvpn:openvpn:2.0.1_rc2:*:*:*:*:*:*:* Versions 2.0.1_rc2 Vulnerable ·OpenVPN
- cpe:2.3:a:openvpn:openvpn:2.0.1_rc3:*:*:*:*:*:*:* Versions 2.0.1_rc3 Vulnerable ·OpenVPN
- cpe:2.3:a:openvpn:openvpn:2.0.1_rc4:*:*:*:*:*:*:* Versions 2.0.1_rc4 Vulnerable ·OpenVPN
- cpe:2.3:a:openvpn:openvpn:2.0.1_rc5:*:*:*:*:*:*:* Versions 2.0.1_rc5 Vulnerable ·OpenVPN
- cpe:2.3:a:openvpn:openvpn:2.0.1_rc6:*:*:*:*:*:*:* Versions 2.0.1_rc6 Vulnerable ·OpenVPN
- cpe:2.3:a:openvpn:openvpn:2.0.1_rc7:*:*:*:*:*:*:* Versions 2.0.1_rc7 Vulnerable ·OpenVPN
- cpe:2.3:a:openvpn:openvpn:2.0_beta1:*:*:*:*:*:*:* Versions 2.0_beta1 Vulnerable ·OpenVPN
- cpe:2.3:a:openvpn:openvpn:2.0_beta2:*:*:*:*:*:*:* Versions 2.0_beta2 Vulnerable ·OpenVPN
Show 64 more CPE
| CPE | Versions | Role | Vendor |
|---|---|---|---|
| cpe:2.3:a:openvpn:openvpn:2.0_beta3:*:*:*:*:*:*:* | 2.0_beta3 | Vulnerable | OpenVPN |
| cpe:2.3:a:openvpn:openvpn:2.0_beta4:*:*:*:*:*:*:* | 2.0_beta4 | Vulnerable | OpenVPN |
| cpe:2.3:a:openvpn:openvpn:2.0_beta5:*:*:*:*:*:*:* | 2.0_beta5 | Vulnerable | OpenVPN |
| cpe:2.3:a:openvpn:openvpn:2.0_beta6:*:*:*:*:*:*:* | 2.0_beta6 | Vulnerable | OpenVPN |
| cpe:2.3:a:openvpn:openvpn:2.0_beta7:*:*:*:*:*:*:* | 2.0_beta7 | Vulnerable | OpenVPN |
| cpe:2.3:a:openvpn:openvpn:2.0_beta8:*:*:*:*:*:*:* | 2.0_beta8 | Vulnerable | OpenVPN |
| cpe:2.3:a:openvpn:openvpn:2.0_beta9:*:*:*:*:*:*:* | 2.0_beta9 | Vulnerable | OpenVPN |
| cpe:2.3:a:openvpn:openvpn:2.0_beta10:*:*:*:*:*:*:* | 2.0_beta10 | Vulnerable | OpenVPN |
| cpe:2.3:a:openvpn:openvpn:2.0_beta11:*:*:*:*:*:*:* | 2.0_beta11 | Vulnerable | OpenVPN |
| cpe:2.3:a:openvpn:openvpn:2.0_beta12:*:*:*:*:*:*:* | 2.0_beta12 | Vulnerable | OpenVPN |
| cpe:2.3:a:openvpn:openvpn:2.0_beta13:*:*:*:*:*:*:* | 2.0_beta13 | Vulnerable | OpenVPN |
| cpe:2.3:a:openvpn:openvpn:2.0_beta15:*:*:*:*:*:*:* | 2.0_beta15 | Vulnerable | OpenVPN |
| cpe:2.3:a:openvpn:openvpn:2.0_beta16:*:*:*:*:*:*:* | 2.0_beta16 | Vulnerable | OpenVPN |
| cpe:2.3:a:openvpn:openvpn:2.0_beta17:*:*:*:*:*:*:* | 2.0_beta17 | Vulnerable | OpenVPN |
| cpe:2.3:a:openvpn:openvpn:2.0_beta18:*:*:*:*:*:*:* | 2.0_beta18 | Vulnerable | OpenVPN |
| cpe:2.3:a:openvpn:openvpn:2.0_beta19:*:*:*:*:*:*:* | 2.0_beta19 | Vulnerable | OpenVPN |
| cpe:2.3:a:openvpn:openvpn:2.0_beta20:*:*:*:*:*:*:* | 2.0_beta20 | Vulnerable | OpenVPN |
| cpe:2.3:a:openvpn:openvpn:2.0_beta28:*:*:*:*:*:*:* | 2.0_beta28 | Vulnerable | OpenVPN |
| cpe:2.3:a:openvpn:openvpn:2.0_rc1:*:*:*:*:*:*:* | 2.0_rc1 | Vulnerable | OpenVPN |
| cpe:2.3:a:openvpn:openvpn:2.0_rc2:*:*:*:*:*:*:* | 2.0_rc2 | Vulnerable | OpenVPN |
| cpe:2.3:a:openvpn:openvpn:2.0_rc3:*:*:*:*:*:*:* | 2.0_rc3 | Vulnerable | OpenVPN |
| cpe:2.3:a:openvpn:openvpn:2.0_rc4:*:*:*:*:*:*:* | 2.0_rc4 | Vulnerable | OpenVPN |
| cpe:2.3:a:openvpn:openvpn:2.0_rc5:*:*:*:*:*:*:* | 2.0_rc5 | Vulnerable | OpenVPN |
| cpe:2.3:a:openvpn:openvpn:2.0_rc6:*:*:*:*:*:*:* | 2.0_rc6 | Vulnerable | OpenVPN |
| cpe:2.3:a:openvpn:openvpn:2.0_rc7:*:*:*:*:*:*:* | 2.0_rc7 | Vulnerable | OpenVPN |
| cpe:2.3:a:openvpn:openvpn:2.0_rc8:*:*:*:*:*:*:* | 2.0_rc8 | Vulnerable | OpenVPN |
| cpe:2.3:a:openvpn:openvpn:2.0_rc9:*:*:*:*:*:*:* | 2.0_rc9 | Vulnerable | OpenVPN |
| cpe:2.3:a:openvpn:openvpn:2.0_rc10:*:*:*:*:*:*:* | 2.0_rc10 | Vulnerable | OpenVPN |
| cpe:2.3:a:openvpn:openvpn:2.0_rc11:*:*:*:*:*:*:* | 2.0_rc11 | Vulnerable | OpenVPN |
| cpe:2.3:a:openvpn:openvpn:2.0_rc12:*:*:*:*:*:*:* | 2.0_rc12 | Vulnerable | OpenVPN |
| cpe:2.3:a:openvpn:openvpn:2.0_rc13:*:*:*:*:*:*:* | 2.0_rc13 | Vulnerable | OpenVPN |
| cpe:2.3:a:openvpn:openvpn:2.0_rc14:*:*:*:*:*:*:* | 2.0_rc14 | Vulnerable | OpenVPN |
| cpe:2.3:a:openvpn:openvpn:2.0_rc15:*:*:*:*:*:*:* | 2.0_rc15 | Vulnerable | OpenVPN |
| cpe:2.3:a:openvpn:openvpn:2.0_rc16:*:*:*:*:*:*:* | 2.0_rc16 | Vulnerable | OpenVPN |
| cpe:2.3:a:openvpn:openvpn:2.0_rc17:*:*:*:*:*:*:* | 2.0_rc17 | Vulnerable | OpenVPN |
| cpe:2.3:a:openvpn:openvpn:2.0_rc18:*:*:*:*:*:*:* | 2.0_rc18 | Vulnerable | OpenVPN |
| cpe:2.3:a:openvpn:openvpn:2.0_rc19:*:*:*:*:*:*:* | 2.0_rc19 | Vulnerable | OpenVPN |
| cpe:2.3:a:openvpn:openvpn:2.0_rc20:*:*:*:*:*:*:* | 2.0_rc20 | Vulnerable | OpenVPN |
| cpe:2.3:a:openvpn:openvpn:2.0_rc21:*:*:*:*:*:*:* | 2.0_rc21 | Vulnerable | OpenVPN |
| cpe:2.3:a:openvpn:openvpn:2.0_test1:*:*:*:*:*:*:* | 2.0_test1 | Vulnerable | OpenVPN |
| cpe:2.3:a:openvpn:openvpn:2.0_test2:*:*:*:*:*:*:* | 2.0_test2 | Vulnerable | OpenVPN |
| cpe:2.3:a:openvpn:openvpn:2.0_test3:*:*:*:*:*:*:* | 2.0_test3 | Vulnerable | OpenVPN |
| cpe:2.3:a:openvpn:openvpn:2.0_test5:*:*:*:*:*:*:* | 2.0_test5 | Vulnerable | OpenVPN |
| cpe:2.3:a:openvpn:openvpn:2.0_test6:*:*:*:*:*:*:* | 2.0_test6 | Vulnerable | OpenVPN |
| cpe:2.3:a:openvpn:openvpn:2.0_test7:*:*:*:*:*:*:* | 2.0_test7 | Vulnerable | OpenVPN |
| cpe:2.3:a:openvpn:openvpn:2.0_test8:*:*:*:*:*:*:* | 2.0_test8 | Vulnerable | OpenVPN |
| cpe:2.3:a:openvpn:openvpn:2.0_test9:*:*:*:*:*:*:* | 2.0_test9 | Vulnerable | OpenVPN |
| cpe:2.3:a:openvpn:openvpn:2.0_test10:*:*:*:*:*:*:* | 2.0_test10 | Vulnerable | OpenVPN |
| cpe:2.3:a:openvpn:openvpn:2.0_test11:*:*:*:*:*:*:* | 2.0_test11 | Vulnerable | OpenVPN |
| cpe:2.3:a:openvpn:openvpn:2.0_test12:*:*:*:*:*:*:* | 2.0_test12 | Vulnerable | OpenVPN |
| cpe:2.3:a:openvpn:openvpn:2.0_test14:*:*:*:*:*:*:* | 2.0_test14 | Vulnerable | OpenVPN |
| cpe:2.3:a:openvpn:openvpn:2.0_test15:*:*:*:*:*:*:* | 2.0_test15 | Vulnerable | OpenVPN |
| cpe:2.3:a:openvpn:openvpn:2.0_test16:*:*:*:*:*:*:* | 2.0_test16 | Vulnerable | OpenVPN |
| cpe:2.3:a:openvpn:openvpn:2.0_test17:*:*:*:*:*:*:* | 2.0_test17 | Vulnerable | OpenVPN |
| cpe:2.3:a:openvpn:openvpn:2.0_test18:*:*:*:*:*:*:* | 2.0_test18 | Vulnerable | OpenVPN |
| cpe:2.3:a:openvpn:openvpn:2.0_test19:*:*:*:*:*:*:* | 2.0_test19 | Vulnerable | OpenVPN |
| cpe:2.3:a:openvpn:openvpn:2.0_test20:*:*:*:*:*:*:* | 2.0_test20 | Vulnerable | OpenVPN |
| cpe:2.3:a:openvpn:openvpn:2.0_test21:*:*:*:*:*:*:* | 2.0_test21 | Vulnerable | OpenVPN |
| cpe:2.3:a:openvpn:openvpn:2.0_test22:*:*:*:*:*:*:* | 2.0_test22 | Vulnerable | OpenVPN |
| cpe:2.3:a:openvpn:openvpn:2.0_test23:*:*:*:*:*:*:* | 2.0_test23 | Vulnerable | OpenVPN |
| cpe:2.3:a:openvpn:openvpn:2.0_test24:*:*:*:*:*:*:* | 2.0_test24 | Vulnerable | OpenVPN |
| cpe:2.3:a:openvpn:openvpn:2.0_test26:*:*:*:*:*:*:* | 2.0_test26 | Vulnerable | OpenVPN |
| cpe:2.3:a:openvpn:openvpn:2.0_test27:*:*:*:*:*:*:* | 2.0_test27 | Vulnerable | OpenVPN |
| cpe:2.3:a:openvpn:openvpn:2.0_test29:*:*:*:*:*:*:* | 2.0_test29 | Vulnerable | OpenVPN |
- cpe:2.3:a:openvpn:openvpn:2.0_beta3:*:*:*:*:*:*:* Versions 2.0_beta3 Vulnerable ·OpenVPN
- cpe:2.3:a:openvpn:openvpn:2.0_beta4:*:*:*:*:*:*:* Versions 2.0_beta4 Vulnerable ·OpenVPN
- cpe:2.3:a:openvpn:openvpn:2.0_beta5:*:*:*:*:*:*:* Versions 2.0_beta5 Vulnerable ·OpenVPN
- cpe:2.3:a:openvpn:openvpn:2.0_beta6:*:*:*:*:*:*:* Versions 2.0_beta6 Vulnerable ·OpenVPN
- cpe:2.3:a:openvpn:openvpn:2.0_beta7:*:*:*:*:*:*:* Versions 2.0_beta7 Vulnerable ·OpenVPN
- cpe:2.3:a:openvpn:openvpn:2.0_beta8:*:*:*:*:*:*:* Versions 2.0_beta8 Vulnerable ·OpenVPN
- cpe:2.3:a:openvpn:openvpn:2.0_beta9:*:*:*:*:*:*:* Versions 2.0_beta9 Vulnerable ·OpenVPN
- cpe:2.3:a:openvpn:openvpn:2.0_beta10:*:*:*:*:*:*:* Versions 2.0_beta10 Vulnerable ·OpenVPN
- cpe:2.3:a:openvpn:openvpn:2.0_beta11:*:*:*:*:*:*:* Versions 2.0_beta11 Vulnerable ·OpenVPN
- cpe:2.3:a:openvpn:openvpn:2.0_beta12:*:*:*:*:*:*:* Versions 2.0_beta12 Vulnerable ·OpenVPN
- cpe:2.3:a:openvpn:openvpn:2.0_beta13:*:*:*:*:*:*:* Versions 2.0_beta13 Vulnerable ·OpenVPN
- cpe:2.3:a:openvpn:openvpn:2.0_beta15:*:*:*:*:*:*:* Versions 2.0_beta15 Vulnerable ·OpenVPN
- cpe:2.3:a:openvpn:openvpn:2.0_beta16:*:*:*:*:*:*:* Versions 2.0_beta16 Vulnerable ·OpenVPN
- cpe:2.3:a:openvpn:openvpn:2.0_beta17:*:*:*:*:*:*:* Versions 2.0_beta17 Vulnerable ·OpenVPN
- cpe:2.3:a:openvpn:openvpn:2.0_beta18:*:*:*:*:*:*:* Versions 2.0_beta18 Vulnerable ·OpenVPN
- cpe:2.3:a:openvpn:openvpn:2.0_beta19:*:*:*:*:*:*:* Versions 2.0_beta19 Vulnerable ·OpenVPN
- cpe:2.3:a:openvpn:openvpn:2.0_beta20:*:*:*:*:*:*:* Versions 2.0_beta20 Vulnerable ·OpenVPN
- cpe:2.3:a:openvpn:openvpn:2.0_beta28:*:*:*:*:*:*:* Versions 2.0_beta28 Vulnerable ·OpenVPN
- cpe:2.3:a:openvpn:openvpn:2.0_rc1:*:*:*:*:*:*:* Versions 2.0_rc1 Vulnerable ·OpenVPN
- cpe:2.3:a:openvpn:openvpn:2.0_rc2:*:*:*:*:*:*:* Versions 2.0_rc2 Vulnerable ·OpenVPN
- cpe:2.3:a:openvpn:openvpn:2.0_rc3:*:*:*:*:*:*:* Versions 2.0_rc3 Vulnerable ·OpenVPN
- cpe:2.3:a:openvpn:openvpn:2.0_rc4:*:*:*:*:*:*:* Versions 2.0_rc4 Vulnerable ·OpenVPN
- cpe:2.3:a:openvpn:openvpn:2.0_rc5:*:*:*:*:*:*:* Versions 2.0_rc5 Vulnerable ·OpenVPN
- cpe:2.3:a:openvpn:openvpn:2.0_rc6:*:*:*:*:*:*:* Versions 2.0_rc6 Vulnerable ·OpenVPN
- cpe:2.3:a:openvpn:openvpn:2.0_rc7:*:*:*:*:*:*:* Versions 2.0_rc7 Vulnerable ·OpenVPN
- cpe:2.3:a:openvpn:openvpn:2.0_rc8:*:*:*:*:*:*:* Versions 2.0_rc8 Vulnerable ·OpenVPN
- cpe:2.3:a:openvpn:openvpn:2.0_rc9:*:*:*:*:*:*:* Versions 2.0_rc9 Vulnerable ·OpenVPN
- cpe:2.3:a:openvpn:openvpn:2.0_rc10:*:*:*:*:*:*:* Versions 2.0_rc10 Vulnerable ·OpenVPN
- cpe:2.3:a:openvpn:openvpn:2.0_rc11:*:*:*:*:*:*:* Versions 2.0_rc11 Vulnerable ·OpenVPN
- cpe:2.3:a:openvpn:openvpn:2.0_rc12:*:*:*:*:*:*:* Versions 2.0_rc12 Vulnerable ·OpenVPN
- cpe:2.3:a:openvpn:openvpn:2.0_rc13:*:*:*:*:*:*:* Versions 2.0_rc13 Vulnerable ·OpenVPN
- cpe:2.3:a:openvpn:openvpn:2.0_rc14:*:*:*:*:*:*:* Versions 2.0_rc14 Vulnerable ·OpenVPN
- cpe:2.3:a:openvpn:openvpn:2.0_rc15:*:*:*:*:*:*:* Versions 2.0_rc15 Vulnerable ·OpenVPN
- cpe:2.3:a:openvpn:openvpn:2.0_rc16:*:*:*:*:*:*:* Versions 2.0_rc16 Vulnerable ·OpenVPN
- cpe:2.3:a:openvpn:openvpn:2.0_rc17:*:*:*:*:*:*:* Versions 2.0_rc17 Vulnerable ·OpenVPN
- cpe:2.3:a:openvpn:openvpn:2.0_rc18:*:*:*:*:*:*:* Versions 2.0_rc18 Vulnerable ·OpenVPN
- cpe:2.3:a:openvpn:openvpn:2.0_rc19:*:*:*:*:*:*:* Versions 2.0_rc19 Vulnerable ·OpenVPN
- cpe:2.3:a:openvpn:openvpn:2.0_rc20:*:*:*:*:*:*:* Versions 2.0_rc20 Vulnerable ·OpenVPN
- cpe:2.3:a:openvpn:openvpn:2.0_rc21:*:*:*:*:*:*:* Versions 2.0_rc21 Vulnerable ·OpenVPN
- cpe:2.3:a:openvpn:openvpn:2.0_test1:*:*:*:*:*:*:* Versions 2.0_test1 Vulnerable ·OpenVPN
- cpe:2.3:a:openvpn:openvpn:2.0_test2:*:*:*:*:*:*:* Versions 2.0_test2 Vulnerable ·OpenVPN
- cpe:2.3:a:openvpn:openvpn:2.0_test3:*:*:*:*:*:*:* Versions 2.0_test3 Vulnerable ·OpenVPN
- cpe:2.3:a:openvpn:openvpn:2.0_test5:*:*:*:*:*:*:* Versions 2.0_test5 Vulnerable ·OpenVPN
- cpe:2.3:a:openvpn:openvpn:2.0_test6:*:*:*:*:*:*:* Versions 2.0_test6 Vulnerable ·OpenVPN
- cpe:2.3:a:openvpn:openvpn:2.0_test7:*:*:*:*:*:*:* Versions 2.0_test7 Vulnerable ·OpenVPN
- cpe:2.3:a:openvpn:openvpn:2.0_test8:*:*:*:*:*:*:* Versions 2.0_test8 Vulnerable ·OpenVPN
- cpe:2.3:a:openvpn:openvpn:2.0_test9:*:*:*:*:*:*:* Versions 2.0_test9 Vulnerable ·OpenVPN
- cpe:2.3:a:openvpn:openvpn:2.0_test10:*:*:*:*:*:*:* Versions 2.0_test10 Vulnerable ·OpenVPN
- cpe:2.3:a:openvpn:openvpn:2.0_test11:*:*:*:*:*:*:* Versions 2.0_test11 Vulnerable ·OpenVPN
- cpe:2.3:a:openvpn:openvpn:2.0_test12:*:*:*:*:*:*:* Versions 2.0_test12 Vulnerable ·OpenVPN
- cpe:2.3:a:openvpn:openvpn:2.0_test14:*:*:*:*:*:*:* Versions 2.0_test14 Vulnerable ·OpenVPN
- cpe:2.3:a:openvpn:openvpn:2.0_test15:*:*:*:*:*:*:* Versions 2.0_test15 Vulnerable ·OpenVPN
- cpe:2.3:a:openvpn:openvpn:2.0_test16:*:*:*:*:*:*:* Versions 2.0_test16 Vulnerable ·OpenVPN
- cpe:2.3:a:openvpn:openvpn:2.0_test17:*:*:*:*:*:*:* Versions 2.0_test17 Vulnerable ·OpenVPN
- cpe:2.3:a:openvpn:openvpn:2.0_test18:*:*:*:*:*:*:* Versions 2.0_test18 Vulnerable ·OpenVPN
- cpe:2.3:a:openvpn:openvpn:2.0_test19:*:*:*:*:*:*:* Versions 2.0_test19 Vulnerable ·OpenVPN
- cpe:2.3:a:openvpn:openvpn:2.0_test20:*:*:*:*:*:*:* Versions 2.0_test20 Vulnerable ·OpenVPN
- cpe:2.3:a:openvpn:openvpn:2.0_test21:*:*:*:*:*:*:* Versions 2.0_test21 Vulnerable ·OpenVPN
- cpe:2.3:a:openvpn:openvpn:2.0_test22:*:*:*:*:*:*:* Versions 2.0_test22 Vulnerable ·OpenVPN
- cpe:2.3:a:openvpn:openvpn:2.0_test23:*:*:*:*:*:*:* Versions 2.0_test23 Vulnerable ·OpenVPN
- cpe:2.3:a:openvpn:openvpn:2.0_test24:*:*:*:*:*:*:* Versions 2.0_test24 Vulnerable ·OpenVPN
- cpe:2.3:a:openvpn:openvpn:2.0_test26:*:*:*:*:*:*:* Versions 2.0_test26 Vulnerable ·OpenVPN
- cpe:2.3:a:openvpn:openvpn:2.0_test27:*:*:*:*:*:*:* Versions 2.0_test27 Vulnerable ·OpenVPN
- cpe:2.3:a:openvpn:openvpn:2.0_test29:*:*:*:*:*:*:* Versions 2.0_test29 Vulnerable ·OpenVPN
Remediation
No fixed version listed by the sources yet.
Timeline
- 2026-10-02 Threatist record created from CVE-2005-2532
- 2026-10-03 Alias added: GHSA-86x4-whvc-8cfg
References
More Openvpn vulnerabilities
- TI-2014-04453 Unquoted Windows search path vulnerability in the ptservice service prior to… CVSS 3.1MEDIUM 5.3
- TI-2022-00467 Authentication bypass in OpenVPN CVSS 3.1CRITICAL 9.8
- TI-2024-18509 Unrestricted file upload in OpenVPN 2 CVSS 3.1CRITICAL 9.8
- TI-2024-16468 The interactive service in OpenVPN 2.6.9 and earlier allows the OpenVPN service pipe to… CVSS 3.1HIGH 7.5
- TI-2023-25309 Use after free in OpenVPN 2 CVSS 3.1CRITICAL 9.8
- TI-2024-05196 OpenVPN before 2.6.11 does not santize PUSH_REPLY messages properly which an attacker… CVSS 3.1CRITICAL 9.1
Sources
- CVE-2005-2532 · CVE Program
- CVE-2005-2532 · NVD
- FIRST EPSS
- GHSA-86x4-whvc-8cfg · GitHub Advisory Database · CC BY 4.0
This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences