CVE-2025-2704

概要

参考情報

• community.openvpn.net/openvpn/wiki/CVE-2025-2704 · Broken Link
• mail-archive.com/[email protected]/msg00142.html
• openwall.com/lists/oss-security/2025/04/02/5 · Mailing List

openvpn のその他の脆弱性

• CVE-2026-13379緊急 9.1The Windows interactive service in OpenVPN 2.7_alpha1 through 2.7.4 allows remote attackers to cause persistent DNS state pollution or a ser…
• CVE-2026-13117高 8.1An incomplete guard in OpenVPN 2.6.0 through 2.6.20 and 2.7_alpha1 through 2.7.4 allows remote authenticated peers to trigger a use-after-fr…
• CVE-2026-12996高 8.1A use-after-free in OpenVPN 2.6.0 through 2.6.20 and 2.7_alpha1 through 2.7.4 allows remote authenticated peers to potentially cause a denia…
• CVE-2026-12932高 8.1A memory leak in the tls-crypt-v2 client key extraction in OpenVPN 2.5.0 through 2.6.20 and 2.7_alpha1 through 2.7.4 allows remote attackers…
• CVE-2026-11771高 7.5OpenVPN version 2.1.0 through 2.6.20 and 2.7_alpha1 through 2.7.4 allows attackers via an off-by-one buffer write in the NTLM proxy authenti…