CNNVD-202601-5051 Information
CNNVD ID
CNNVD-202601-5051
Related CVE
- CNNVD Published: 2026-01-30
Description (Chinese)
OpenVPN是美国OpenVPN公司的一个用于创建虚拟专用网络（VPN）加密通道的软件包，它使用OpenSSL库来加密数据与控制信息，并允许创建的VPN使用公开密钥、电子证书或者用户名/密码来进行身份验证。 OpenVPN 2.7_alpha1至2.7_rc5版本存在安全漏洞，该漏洞源于纪元密钥槽处理不足，可能导致远程认证用户触发断言并造成拒绝服务。
Description (English)
OpenVPN is a software package for the creation of a virtual private network (VPN) encryption channel at OpenVPN, United States, which uses the OpenSSL library to encrypt data and control information and allows the created VPN to use public keys, electronic certificates or username/cipher for identification. OpenVPN 2.7 alpha1 to 2.7 rc5 has a security loophole, which stems from the inadequate processing of the age key slot, which may result in a remote authentication user triggers an assertion and results in a denial of service.
Hazard Level
High
Vulnerability Type
其他
Affected Vendor
OpenVPN
Published
2026-01-30
Last Modified
2026-02-24
References
https://community.openvpn.net/Security%20Announcements/CVE-2025-15497 https://www.mail-archive.com/openvpn-announce@lists.sourceforge.net/msg00156.html
Patch
https://community.openvpn.net/Downloads
Share on: