Known vulnerabilities in openvpn

Known vulnerabilities in openvpn

Vendor: openEuler

Software: openvpn

Software CPE: cpe:2.3:o:openeuler:openvpn:*:*:*:*:*:openeuler:*:*

Website: https://www.openeuler.org/

Total vulnerabilities: 16

Public exploits: 0

Known exploited (KEV): 0

Breakdown by Severity Chart

Vulnerabilities (16)

Vulnerability	CWE-ID	CSH Severity	Public Exploit	KEV	First fixed release	Published	Bulletins
#VU147005 - Resource exhaustion CVE-2026-84732	CWE-400	Medium	No	No	2.6.9-10	05.09.2026	SB2026090525 SB20260921186 SB20260925183 and 2 more
#VU139870 - Use After Free CVE-2026-12996	CWE-416	Medium	No	No	2.4.8-14, 2.5.5-10, 2.6.9-8	02.07.2026	SB2026072869 SB2026072873 SB2026072874 and 5 more
#VU139871 - Use After Free CVE-2026-13117	CWE-416	Medium	No	No	2.6.9-8	02.07.2026	SB2026072869 SB2026072873 SB2026072874 and 3 more
#VU139872 - Improper input validation CVE-2026-13122	CWE-20	Medium	No	No	2.6.9-8	02.07.2026	SB2026072869 SB2026072873 SB2026072874 and 4 more
#VU139873 - Missing release of memory after effective lifetime CVE-2026-12932	CWE-401	Medium	No	No	2.5.5-10, 2.6.9-8	02.07.2026	SB2026072869 SB2026072873 SB2026072874 and 5 more
#VU139874 - Out-of-bounds write CVE-2026-11771	CWE-787	Medium	No	No	2.6.9-8	02.07.2026	SB2026072869 SB2026072873 SB2026072874 and 3 more
#VU139875 - Missing release of memory after effective lifetime CVE-2026-13698	CWE-401	Medium	No	No	2.5.5-10, 2.6.9-8	02.07.2026	SB2026072869 SB2026072873 SB2026072874 and 5 more
#VU127529 - Improper input validation CVE-2026-35058	CWE-20	Low	No	No	2.5.5-7, 2.6.9-7	24.04.2026	SB20260424124 SB20260424129 SB20260424130 and 14 more
#VU127528 - Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition') CVE-2026-40215	CWE-362	Low	No	No	2.4.8-12, 2.5.5-7, 2.6.9-7	24.04.2026	SB20260424124 SB20260424129 SB20260424130 and 14 more
#VU118819 - Insufficient Verification of Data Authenticity CVE-2025-13086	CWE-345	Medium	No	No	2.6.9-5, 2.6.9-6	27.11.2025	SB2025112769 SB2025112771 SB2025112840 and 4 more
#VU106925 - Reachable Assertion CVE-2025-2704	CWE-617	Medium	No	No	2.6.9-4	03.04.2025	SB2025040316 SB2025040322 SB2025040323 and 6 more
#VU92938 - Resource Management Errors CVE-2024-28882	CWE-399	Low	No	No	2.5.5-3	20.06.2024	SB20240620213 SB2024062132 SB2024070301 and 5 more
#VU92937 - Resource exhaustion CVE-2024-5594	CWE-400	Low	No	No	2.5.5-4	20.06.2024	SB20240620213 SB2024062132 SB2024070301 and 8 more
#VU61608 - Improper Authentication CVE-2022-0547	CWE-287	Medium	No	No	2.4.8-8	24.03.2022	SB2022032420 SB2022032423 SB2022040412 and 17 more
#VU52479 - Improper Authentication CVE-2020-15078	CWE-287	Medium	No	No	2.4.8-7	21.04.2021	SB2021042156 SB2021052621 SB2021090828 and 11 more
#VU27616 - Resource Management Errors CVE-2020-11810	CWE-399	Low	No	No	2.4.8-5	10.05.2020	SB2020051001 SB2020073009 SB2020041802 and 11 more