OP
Product
OpenVPN
64
CVEs
0
On KEV
9.8
Max CVSS
3
New 30D
Severity mix
Critical 8High 27Medium 13Low 5
Watch
Add OpenVPN to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2026-81738 | 2.3 | Sep 7 | OpenVPN 2.5.0 through 2.7.6 on Windows using the tap-windows6 driver allows attackers to trigger an out-of-bounds write via crafted DOMAIN-SEARCH entries Affected: 2.5.0 through 2.7.6 |
| CVE-2026-63650 | 2.0 | Aug 14 | OpenVPN 2.7_alpha1 through 2.7.5 using mbedTLS allows remote authenticated users to be misidentified by ignoring the configured X.509 username identity lookup field Affected: 2.7_alpha1 before 2.7.6 |
| CVE-2026-82312 | 1.8 | Sep 7 | OpenVPN 2.0.0 through 2.6.22 and 2.7_alpha1 through 2.7.6 on Windows allows local authenticated users to cause a denial of service via a NULL DACL on named IPC objects Affected: 2.0.0 through 2.6.22; 2.7_alpha1 through 2.7.6 |
| CVE-2014-8104 | – | Dec 3 | OpenVPN 2.x before 2.0.11, 2.1.x, 2.2.x before 2.2.3, and 2.3.x before 2.3.6 allows remote authenticated users to cause a denial of service (server crash) via a small control… Affected: 2.0.1_rc1; 2.0.1_rc2; 2.0.1_rc3; 2.0.1_rc4; 2.0.1_rc5; 2.0.1_rc6; +34 more |
| CVE-2013-2061 | – | Nov 18 | The openvpn_decrypt function in crypto.c in OpenVPN 2.3.0 and earlier, when running in UDP mode, allows remote attackers to obtain sensitive information via a timing attack… Affected: through 2.3.0; 1.2.0; 1.2.1; 1.3.0; 1.3.1; 1.3.2; +8 more |
| CVE-2008-3459 | – | Aug 4 | Unspecified vulnerability in OpenVPN 2.1-beta14 through 2.1-rc8, when running on non-Windows systems, allows remote servers to execute arbitrary commands via crafted (1) lladdr… Affected: 2.1; 2.1; 2.1; 2.1; 2.1; 2.1; +5 more |
| CVE-2006-2229 | – | May 5 | OpenVPN 2.0.7 and earlier, when configured to use the --management option with an IP that is not 127.0.0.1, uses a cleartext password for TCP sessions to the management interface,… Affected: 2.0; 2.0.1_rc1; 2.0.1_rc2; 2.0.1_rc3; 2.0.1_rc4; 2.0.1_rc5; +34 more |
| CVE-2006-1629 | – | Apr 6 | OpenVPN 2.0 through 2.0.5 allows remote malicious servers to execute arbitrary code on the client by using setenv with the LD_PRELOAD environment variable Affected: 2.0; 2.0.4 |
| CVE-2005-3409 | – | Nov 2 | OpenVPN 2.x before 2.0.4, when running in TCP mode, allows remote attackers to cause a denial of service (segmentation fault) by forcing the accept function call to return an… Affected: 2.0; 2.0.1_rc1; 2.0.1_rc2; 2.0.1_rc3; 2.0.1_rc4; 2.0.1_rc5; +34 more |
| CVE-2005-3393 | – | Nov 1 | Format string vulnerability in the foreign_option function in options.c for OpenVPN 2.0.x allows remote clients to execute arbitrary code via format string specifiers in a push of… Affected: 2.0; 2.0_beta11 |
| CVE-2005-2532 | – | Aug 24 | OpenVPN before 2.0.1 does not properly flush the OpenSSL error queue when a packet can not be decrypted by the server, which allows remote authenticated attackers to cause a… Affected: 2.0; 2.0.1_rc1; 2.0.1_rc2; 2.0.1_rc3; 2.0.1_rc4; 2.0.1_rc5; +34 more |
| CVE-2005-2534 | – | Aug 24 | Race condition in OpenVPN before 2.0.1, when --duplicate-cn is not enabled, allows remote attackers to cause a denial of service (server crash) via simultaneous TCP connections… Affected: 2.0; 2.0.1_rc1; 2.0.1_rc2; 2.0.1_rc3; 2.0.1_rc4; 2.0.1_rc5; +34 more |
| CVE-2005-2533 | – | Aug 24 | OpenVPN before 2.0.1, when running in "dev tap" Ethernet bridging mode, allows remote authenticated clients to cause a denial of service (memory exhaustion) via a flood of packets… Affected: 2.0; 2.0.1_rc1; 2.0.1_rc2; 2.0.1_rc3; 2.0.1_rc4; 2.0.1_rc5; +34 more |
| CVE-2005-2531 | – | Aug 24 | OpenVPN before 2.0.1, when running with "verb 0" and without TLS authentication, does not properly flush the OpenSSL error queue when a client fails certificate authentication to… Affected: 2.0; 2.0.1_rc1; 2.0.1_rc2; 2.0.1_rc3; 2.0.1_rc4; 2.0.1_rc5; +34 more |