Known vulnerabilities in openvpn (Ubuntu package)

Software CPE: cpe:2.3:o:canonical:openvpn_ubuntu_package:*:*:*:*:*:ubuntu:*:*
Total vulnerabilities: 18
Public exploits: 0
Known exploited (KEV): 0

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting openvpn (Ubuntu package) openvpn (Ubuntu package) is affected by 18 known vulnerabilities: 1 high, 11 medium, 6 low Critical High Medium Low

Vulnerabilities (18)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU139870 - Use After Free
CVE-2026-12996
CWE-416 Medium
No
No
2.5.11-0ubuntu0.22.04.4, 2.6.19-0ubuntu0.24.04.3, 2.7.0-1ubuntu1.2 02.07.2026 SB2026072869
SB2026072873
SB2026072874
and 5 more
#VU139871 - Use After Free
CVE-2026-13117
CWE-416 Medium
No
No
2.5.11-0ubuntu0.22.04.4, 2.6.19-0ubuntu0.24.04.3, 2.7.0-1ubuntu1.2 02.07.2026 SB2026072869
SB2026072873
SB2026072874
and 3 more
#VU139872 - Improper input validation
CVE-2026-13122
CWE-20 Medium
No
No
2.5.11-0ubuntu0.22.04.4, 2.6.19-0ubuntu0.24.04.3, 2.7.0-1ubuntu1.2 02.07.2026 SB2026072869
SB2026072873
SB2026072874
and 4 more
#VU139873 - Missing release of memory after effective lifetime
CVE-2026-12932
CWE-401 Medium
No
No
2.5.11-0ubuntu0.22.04.4, 2.6.19-0ubuntu0.24.04.3, 2.7.0-1ubuntu1.2 02.07.2026 SB2026072869
SB2026072873
SB2026072874
and 5 more
#VU139874 - Out-of-bounds write
CVE-2026-11771
CWE-787 Medium
No
No
2.5.11-0ubuntu0.22.04.4, 2.6.19-0ubuntu0.24.04.3, 2.7.0-1ubuntu1.2 02.07.2026 SB2026072869
SB2026072873
SB2026072874
and 3 more
#VU139875 - Missing release of memory after effective lifetime
CVE-2026-13698
CWE-401 Medium
No
No
2.5.11-0ubuntu0.22.04.4, 2.6.19-0ubuntu0.24.04.3, 2.7.0-1ubuntu1.2 02.07.2026 SB2026072869
SB2026072873
SB2026072874
and 5 more
#VU127529 - Improper input validation
CVE-2026-35058
CWE-20 Low
No
No
2.5.11-0ubuntu0.22.04.3, 2.6.19-0ubuntu0.24.04.2, 2.6.19-0ubuntu0.25.10.2, 2.7.0-1ubuntu1.1 24.04.2026 SB20260424124
SB20260424129
SB20260424130
and 14 more
#VU127528 - Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition')
CVE-2026-40215
CWE-362 Low
No
No
2.5.11-0ubuntu0.22.04.3, 2.6.19-0ubuntu0.24.04.2, 2.6.19-0ubuntu0.25.10.2, 2.7.0-1ubuntu1.1 24.04.2026 SB20260424124
SB20260424129
SB20260424130
and 14 more
#VU118819 - Insufficient Verification of Data Authenticity
CVE-2025-13086
CWE-345 Medium
No
No
2.6.14-0ubuntu0.24.04.3, 2.6.14-0ubuntu0.25.04.3, 2.6.14-2ubuntu1.1 27.11.2025 SB2025112769
SB2025112771
SB2025112840
and 4 more
#VU106925 - Reachable Assertion
CVE-2025-2704
CWE-617 Medium
No
No
2.6.12-0ubuntu0.24.04.3, 2.6.12-1ubuntu1.2 03.04.2025 SB2025040316
SB2025040322
SB2025040323
and 6 more
#VU92938 - Resource Management Errors
CVE-2024-28882
CWE-399 Low
No
No
2.4.12-0ubuntu0.20.04.2, 2.5.9-0ubuntu0.22.04.3, 2.6.5-0ubuntu1.2, 2.6.9-1ubuntu4.1 20.06.2024 SB20240620213
SB2024062132
SB2024070301
and 5 more
#VU92937 - Resource exhaustion
CVE-2024-5594
CWE-400 Low
No
No
Ubuntu Pro, 2.4.12-0ubuntu0.20.04.2, 2.5.9-0ubuntu0.22.04.3, 2.6.5-0ubuntu1.2, 2.6.9-1ubuntu4.1 20.06.2024 SB20240620213
SB2024062132
SB2024070301
and 8 more
#VU82952 - Divide By Zero
CVE-2023-46849
CWE-369 Medium
No
No
2.6.1-1ubuntu1.1, 2.6.5-0ubuntu1.1 10.11.2023 SB2023111004
SB2023111005
SB2023111006
and 6 more
#VU82951 - Use After Free
CVE-2023-46850
CWE-416 Low
No
No
2.6.1-1ubuntu1.1, 2.6.5-0ubuntu1.1 10.11.2023 SB2023111004
SB2023111005
SB2023111006
and 6 more
#VU61608 - Improper Authentication
CVE-2022-0547
CWE-287 Medium
No
No
Ubuntu Pro, 2.4.4-2ubuntu1.7, 2.4.7-1ubuntu2.20.04.4, 2.5.1-3ubuntu1.1 24.03.2022 SB2022032420
SB2022032423
SB2022040412
and 17 more
#VU52479 - Improper Authentication
CVE-2020-15078
CWE-287 Medium
No
No
2.4.4-2ubuntu1.5, 2.4.7-1ubuntu2.20.04.2, 2.4.9-3ubuntu1.1, 2.5.1-1ubuntu1.1 21.04.2021 SB2021042156
SB2021052621
SB2021090828
and 11 more
#VU27616 - Resource Management Errors
CVE-2020-11810
CWE-399 Low
No
No
2.4.4-2ubuntu1.5, 2.4.7-1ubuntu2.20.04.2, 2.4.9-3ubuntu1.1, 2.5.1-1ubuntu1.1 10.05.2020 SB2020051001
SB2020073009
SB2020041802
and 11 more
#VU8637 - Memory corruption
CVE-2017-12166
CWE-119 High
No
No
Ubuntu Pro 29.09.2017 SB2017092902
SB2017092904
SB2017110308
and 11 more