Known vulnerabilities in openvpn (Ubuntu package)
Vendor:
Canonical Ltd.
Software:
openvpn (Ubuntu package)
Software CPE:
cpe:2.3:o:canonical:openvpn_ubuntu_package:*:*:*:*:*:ubuntu:*:*
Website:
https://www.ubuntu.com/
Total vulnerabilities:
18
Public exploits:
0
Known exploited (KEV):
0
Breakdown by Severity Chart
2.0.5-1build1
2.0-3~hoary1
1.99+2.rc6-1ubuntu0.2
2.5.11-0ubuntu0.22.04.5
2.6.19-0ubuntu0.24.04.4
2.7.0-1ubuntu1.3
2.5.11-0ubuntu0.22.04.4
2.6.19-0ubuntu0.24.04.3
2.7.0-1ubuntu1.2
2.5.11-0ubuntu0.22.04.3
2.6.19-0ubuntu0.24.04.2
2.6.19-0ubuntu0.25.10.2
2.7.0-1ubuntu1.1
2.6.14-0ubuntu0.24.04.3
2.6.14-0ubuntu0.25.04.3
2.6.14-2ubuntu1.1
2.6.14-2ubuntu1
2.6.14-0ubuntu0.25.04.2
2.6.14-0ubuntu0.24.04.2
2.6.14-1
2.6.13-1ubuntu2
2.6.13-1
2.6.13-1ubuntu1
2.6.12-1
2.6.12-1ubuntu1
2.6.12-0ubuntu0.24.04.1
2.6.11-1
2.6.11-1ubuntu1
2.6.10-0ubuntu1
2.6.9-1ubuntu4
2.6.9-1ubuntu3
2.6.9-1ubuntu2
2.6.9-1
2.6.9-1ubuntu1
2.6.3-2.1
2.6.7-1
2.6.7-1ubuntu1
2.6.5-0ubuntu1
2.6.3-2
2.6.3-2ubuntu1
2.6.3-1
2.6.3-1ubuntu1
2.6.1-1~exp1
2.6.1-1
2.6.1-1ubuntu1
2.6.0~git20221215+beta2-1ubuntu1
2.6.0~git20220518+dco-3ubuntu1
2.6.0~git20220518+dco-2ubuntu4
2.5.6-1
2.6.0~git20220317+dco-1
2.6.0~git20220510+dco-1
2.6.0~git20220518+dco-1
2.6.0~git20220518+dco-2
2.6.0~git20220518+dco-2ubuntu1
2.6.0~git20220518+dco-2ubuntu2
2.6.0~git20220518+dco-2ubuntu3
2.6.0~git20220518+dco-3
2.6.0~git20220518+dco-3ubuntu2
2.6.0~git20220808-1
2.6.0~git20220811-1
2.6.0~git20220811-2
2.6.0~git20220818-1
2.6.0~git20220818-1ubuntu1
2.6.0~git20221116-1
2.6.0~git20221116-1ubuntu1
2.6.0~git20221201-1
2.6.0~git20221201-1ubuntu1
2.6.0~git20221215+beta2-1
2.6.0~git20221222-1
2.6.0~git20221222-1ubuntu1
2.6.0~rc1-1
2.6.0~rc1-1ubuntu1
2.6.0~rc2-1
2.6.0~rc2-1ubuntu1
2.6.0-1
2.6.0-1ubuntu1
2.5.9-0ubuntu0.22.04.1
2.5.9-0ubuntu0.22.04.2
2.5.8-0ubuntu0.22.04.1
2.5.5-1ubuntu3
2.5.5-1ubuntu3.1
2.5.5-1ubuntu2
2.5.5-1
2.5.5-1ubuntu1
2.5.1-3ubuntu5
2.5.1-3ubuntu4
2.5.1-3ubuntu3
2.5.1-3ubuntu2
2.5.1-3
2.5.1-3ubuntu1
2.5.1-2
2.5.1-2ubuntu1
2.5.1-1
2.5.1-1ubuntu1
2.5~beta1-1
2.5~beta1-2
2.5~beta1-3
2.5~beta3-1
2.5~rc2-1
2.5~rc3-1
2.5.0-1
2.5.0-1ubuntu1
2.4.12-0ubuntu0.20.04.1
2.4.9-3
2.4.9-3ubuntu1
2.4.9-2ubuntu2
2.4.9-1
2.4.9-2
2.4.9-2ubuntu1
2.4.7-1ubuntu2.20.04.3
2.4.7-1ubuntu2.20.04.1
2.4.7-1ubuntu2.19.10.1
2.4.7-1
2.4.7-1ubuntu1
2.4.6-1ubuntu2.1
2.4.4-2ubuntu1.4
2.4.4-2ubuntu1.2
2.2.1-8ubuntu1.1
2.2.1-8ubuntu1.2
2.2.1-8ubuntu1.3
2.2.1-8ubuntu1.5
2.6.14-1ubuntu1
2.6.13-1ubuntu3
2.6.14-0ubuntu0.25.04.1
2.6.14-0ubuntu0.24.04.1
2.6.12-0ubuntu0.24.04.3~bpo22.04.1
2.5.11-0ubuntu0.22.04.1
2.6.12-0ubuntu0.24.04.3
2.6.12-1ubuntu1.2
2.4.12-0ubuntu0.20.04.2
2.5.9-0ubuntu0.22.04.3
2.6.5-0ubuntu1.2
2.6.9-1ubuntu4.1
Ubuntu Pro
2.6.1-1ubuntu1.1
2.6.5-0ubuntu1.1
2.4.7-1ubuntu2.20.04.2
2.4.9-3ubuntu1.1
2.5.1-1ubuntu1.1
2.4.4-2ubuntu1.7
2.4.7-1ubuntu2.20.04.4
2.5.1-3ubuntu1.1
2.4.4-2ubuntu1.6
2.4.4-2ubuntu1.5
2.4.7
2.4.4
2.3.10
2.3.2
2.2.1
2.2.1-8ubuntu1.4
2.4.7-1ubuntu2
2.4.6-1ubuntu3.1
2.4.6-1ubuntu2.2
2.4.4-2ubuntu1.3
2.3.10-1ubuntu2.2
debug
server
client
2.4.6-1ubuntu3
2.4.6-1ubuntu2
2.4.5-1
2.4.6-1
2.4.6-1ubuntu1
2.4.4-2
2.4.4-2ubuntu1
2.4.4-2ubuntu1.1
2.4.4-1
2.4.4-1ubuntu1
2.4~beta1-1
2.4~rc1-1
2.4~rc1-2
1.6.0+2.beta11-1
1.6.0+2.beta12-1
1.6.0+2.beta14-1
1.99+2.beta15-1
1.99+2.beta15-2
1.99+2.beta15-3
1.99+2.beta15-4
1.99+2.beta15-5
1.99+2.beta16-1
1.99+2.beta16-2
1.99+2.beta17-1
1.99+2.beta17-2
1.99+2.beta18-1
1.99+2.beta18-2
1.99+2.beta19-1
1.99+2.rc6-1
1.99+2.rc10-1
1.99+2.rc11-1
1.99+2.rc11-2
1.99+2.rc12-1
1.99+2.rc16-1
1.99+2.rc18-1
1.99+2.rc20-1
2.1~rc2-1
2.1~rc4-1
2.1~rc4-2
2.1~rc7-1
2.1~rc7-2
2.1~rc7-3
2.1~rc7-4
2.1~rc7-5
2.1~rc7-6
2.1~rc8-1
2.1~rc9-1
2.1~rc9-2
2.1~rc9-3
2.1~rc9-3ubuntu1
2.1~rc9-3ubuntu2
2.1~rc10-1
2.1~rc11-1
2.1~rc11-1ubuntu1
2.1~rc11-1ubuntu2
2.1~rc11-1ubuntu3
2.1~rc15-1
2.1~rc15-1ubuntu1
2.1~rc19-1
2.1~rc19-1ubuntu1
2.1~rc19-1ubuntu2
2.1~rc19-2
2.1~rc20-1
2.1~rc20-2
2.1~rc20-2ubuntu1
2.1~rc20-3
2.1~rc21-1
2.1~rc21-2
2.1~rc22-1
2.3~rc1-1
2.4.0-6
2.4.3-1
2.4.3-2
2.4.3-3
2.4.3-4
2.4.3-4ubuntu1
2.4.0-5ubuntu2
2.4.0-5
2.4.0-5ubuntu1
2.4.0-4ubuntu1.3
2.3.11-2
2.4.0-1
2.4.0-2
2.4.0-3
2.4.0-4
2.4.0-4ubuntu1
2.4.0-4ubuntu1.2
2.3.2-7ubuntu3.1
2.3.2-7ubuntu3.2
2.3.11-1ubuntu2
2.3.11-1ubuntu2.1
2.3.11-1
2.3.11-1ubuntu1
2.3.10-1ubuntu2
2.3.10-1ubuntu2.1
1.2.0-1
1.2.0-2
1.2.1-1
1.3.0-1
1.3.0-2
1.3.2-1
1.3.2-2
1.3.2-3
1.4.0-1
1.4.0-2
1.4.1-1
1.4.1.4-1
1.4.3-1
1.4.3-2
1.4.3-3
1.5.0-1
1.5.0-2
1.5.0-3
1.6.0-1
1.6.0-2
1.6.0-3
1.6.0-4
1.6.0-5
2.0-1
2.0-2
2.0-3
2.0-4
2.0.2-1
2.0.2-2
2.0.5-1
2.0.6-1
2.0.6-2
2.0.7-1
2.0.9-1
2.0.9-2
2.0.9-3
2.0.9-4
2.0.9-5
2.0.9-6
2.0.9-7
2.0.9-8
2.1.0-1
2.1.0-1ubuntu1
2.1.0-2
2.1.0-2ubuntu1
2.1.0-2ubuntu2
2.1.0-3
2.1.0-3ubuntu1
2.1.3-1
2.1.3-1ubuntu1
2.1.3-1ubuntu2
2.1.3-2
2.1.3-2ubuntu1
2.1.3-2ubuntu2
2.1.3-2ubuntu3
2.1.3-3
2.1.3-4
2.1.3-4ubuntu1
2.1.3-4.1
2.1.3-4.1ubuntu1
2.1.3-4.1ubuntu2
2.1.3-5
2.2.0-1
2.2.0-2
2.2.0-2ubuntu1
2.2.1-1
2.2.1-2
2.2.1-3
2.2.1-3ubuntu1
2.2.1-4
2.2.1-5
2.2.1-5ubuntu1
2.2.1-6
2.2.1-7
2.2.1-8
2.2.1-8ubuntu1
2.2.1-8ubuntu2
2.2.1-8ubuntu3
2.3.0-1
2.3.1-1
2.3.1-2
2.3.1-2ubuntu1
2.3.1-2ubuntu2
2.3.2-1
2.3.2-2
2.3.2-3
2.3.2-4
2.3.2-4ubuntu1
2.3.2-5
2.3.2-5ubuntu1
2.3.2-6
2.3.2-7
2.3.2-7ubuntu1
2.3.2-7ubuntu2
2.3.2-7ubuntu3
2.3.2-8
2.3.2-9
2.3.2-9ubuntu1
2.3.2-9ubuntu2
2.3.2-9ubuntu3
2.3.2-9ubuntu4
2.3.3-1
2.3.4-1
2.3.4-2
2.3.4-3
2.3.4-4
2.3.4-5
2.3.4-5ubuntu1
2.3.5-1
2.3.7-1
2.3.7-1ubuntu1
2.3.7-2
2.3.7-2ubuntu1
2.3.8-1
2.3.8-1ubuntu1
2.3.10-1
2.3.10-1ubuntu1
Vulnerabilities (18)
| Vulnerability | CWE-ID | CSH Severity | Public Exploit | KEV | First fixed release | Published | Bulletins |
|---|---|---|---|---|---|---|---|
| #VU139870 - Use After Free CVE-2026-12996 |
CWE-416 | Medium | 2.5.11-0ubuntu0.22.04.4, 2.6.19-0ubuntu0.24.04.3, 2.7.0-1ubuntu1.2 | 02.07.2026 |
SB2026072869 SB2026072873 SB2026072874 and 5 more |
||
| #VU139871 - Use After Free CVE-2026-13117 |
CWE-416 | Medium | 2.5.11-0ubuntu0.22.04.4, 2.6.19-0ubuntu0.24.04.3, 2.7.0-1ubuntu1.2 | 02.07.2026 |
SB2026072869 SB2026072873 SB2026072874 and 3 more |
||
| #VU139872 - Improper input validation CVE-2026-13122 |
CWE-20 | Medium | 2.5.11-0ubuntu0.22.04.4, 2.6.19-0ubuntu0.24.04.3, 2.7.0-1ubuntu1.2 | 02.07.2026 |
SB2026072869 SB2026072873 SB2026072874 and 4 more |
||
| #VU139873 - Missing release of memory after effective lifetime CVE-2026-12932 |
CWE-401 | Medium | 2.5.11-0ubuntu0.22.04.4, 2.6.19-0ubuntu0.24.04.3, 2.7.0-1ubuntu1.2 | 02.07.2026 |
SB2026072869 SB2026072873 SB2026072874 and 5 more |
||
| #VU139874 - Out-of-bounds write CVE-2026-11771 |
CWE-787 | Medium | 2.5.11-0ubuntu0.22.04.4, 2.6.19-0ubuntu0.24.04.3, 2.7.0-1ubuntu1.2 | 02.07.2026 |
SB2026072869 SB2026072873 SB2026072874 and 3 more |
||
| #VU139875 - Missing release of memory after effective lifetime CVE-2026-13698 |
CWE-401 | Medium | 2.5.11-0ubuntu0.22.04.4, 2.6.19-0ubuntu0.24.04.3, 2.7.0-1ubuntu1.2 | 02.07.2026 |
SB2026072869 SB2026072873 SB2026072874 and 5 more |
||
| #VU127529 - Improper input validation CVE-2026-35058 |
CWE-20 | Low | 2.5.11-0ubuntu0.22.04.3, 2.6.19-0ubuntu0.24.04.2, 2.6.19-0ubuntu0.25.10.2, 2.7.0-1ubuntu1.1 | 24.04.2026 |
SB20260424124 SB20260424129 SB20260424130 and 14 more |
||
| #VU127528 - Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition') CVE-2026-40215 |
CWE-362 | Low | 2.5.11-0ubuntu0.22.04.3, 2.6.19-0ubuntu0.24.04.2, 2.6.19-0ubuntu0.25.10.2, 2.7.0-1ubuntu1.1 | 24.04.2026 |
SB20260424124 SB20260424129 SB20260424130 and 14 more |
||
| #VU118819 - Insufficient Verification of Data Authenticity CVE-2025-13086 |
CWE-345 | Medium | 2.6.14-0ubuntu0.24.04.3, 2.6.14-0ubuntu0.25.04.3, 2.6.14-2ubuntu1.1 | 27.11.2025 |
SB2025112769 SB2025112771 SB2025112840 and 4 more |
||
| #VU106925 - Reachable Assertion CVE-2025-2704 |
CWE-617 | Medium | 2.6.12-0ubuntu0.24.04.3, 2.6.12-1ubuntu1.2 | 03.04.2025 |
SB2025040316 SB2025040322 SB2025040323 and 6 more |
||
| #VU92938 - Resource Management Errors CVE-2024-28882 |
CWE-399 | Low | 2.4.12-0ubuntu0.20.04.2, 2.5.9-0ubuntu0.22.04.3, 2.6.5-0ubuntu1.2, 2.6.9-1ubuntu4.1 | 20.06.2024 |
SB20240620213 SB2024062132 SB2024070301 and 5 more |
||
| #VU92937 - Resource exhaustion CVE-2024-5594 |
CWE-400 | Low | Ubuntu Pro, 2.4.12-0ubuntu0.20.04.2, 2.5.9-0ubuntu0.22.04.3, 2.6.5-0ubuntu1.2, 2.6.9-1ubuntu4.1 | 20.06.2024 |
SB20240620213 SB2024062132 SB2024070301 and 8 more |
||
| #VU82952 - Divide By Zero CVE-2023-46849 |
CWE-369 | Medium | 2.6.1-1ubuntu1.1, 2.6.5-0ubuntu1.1 | 10.11.2023 |
SB2023111004 SB2023111005 SB2023111006 and 6 more |
||
| #VU82951 - Use After Free CVE-2023-46850 |
CWE-416 | Low | 2.6.1-1ubuntu1.1, 2.6.5-0ubuntu1.1 | 10.11.2023 |
SB2023111004 SB2023111005 SB2023111006 and 6 more |
||
| #VU61608 - Improper Authentication CVE-2022-0547 |
CWE-287 | Medium | Ubuntu Pro, 2.4.4-2ubuntu1.7, 2.4.7-1ubuntu2.20.04.4, 2.5.1-3ubuntu1.1 | 24.03.2022 |
SB2022032420 SB2022032423 SB2022040412 and 17 more |
||
| #VU52479 - Improper Authentication CVE-2020-15078 |
CWE-287 | Medium | 2.4.4-2ubuntu1.5, 2.4.7-1ubuntu2.20.04.2, 2.4.9-3ubuntu1.1, 2.5.1-1ubuntu1.1 | 21.04.2021 |
SB2021042156 SB2021052621 SB2021090828 and 11 more |
||
| #VU27616 - Resource Management Errors CVE-2020-11810 |
CWE-399 | Low | 2.4.4-2ubuntu1.5, 2.4.7-1ubuntu2.20.04.2, 2.4.9-3ubuntu1.1, 2.5.1-1ubuntu1.1 | 10.05.2020 |
SB2020051001 SB2020073009 SB2020041802 and 11 more |
||
| #VU8637 - Memory corruption CVE-2017-12166 |
CWE-119 | High | Ubuntu Pro | 29.09.2017 |
SB2017092902 SB2017092904 SB2017110308 and 11 more |