CNNVD-202508-290 Information

CNNVD ID

CNNVD-202508-290

CVE-2025-54870

  • CNNVD Published: 2025-08-05

Description (Chinese)

vtun-ng是Jan-Espen Oversand个人开发者的一个应用程序。 VTun-ng 3.0.17及之前版本存在安全漏洞,该漏洞源于加密模块初始化失败可能导致明文传输。

Description (English)

vtun-ng is an application for Jan-Espen Overseas personal developers. There is a security loophole in VTun-ng 3.0.17 and earlier versions, which stems from the failure of initialization of the encryption module, which may result in express transmissions.

Hazard Level

High

Vulnerability Type

其他

Affected Vendor

个人开发者

Published

2025-08-05

Last Modified

2026-02-24

References

https://github.com/leakingmemory/vtun-ng/security/advisories/GHSA-m3jc-27c6-2wrf https://github.com/leakingmemory/vtun-ng/commit/8c63982b6c487c52db1d56ab94c266f0bc857140 https://access.redhat.com/security/cve/cve-2025-54870

Patch

https://github.com/leakingmemory/vtun-ng/releases

Share on: