CVE-2025-2704 — OpenVPN / OpenVPN

CVE-2025-2704

OpenVPN / OpenVPN PUBLISHED

Description (CNA)

OpenVPN version 2.6.1 through 2.6.13 in server mode using TLS-crypt-v2 allows remote attackers to trigger a denial of service by corrupting and replaying network packets in the early handshake phase

Affected (CNA)

Vendor / product	Versions
OpenVPN / OpenVPN	affected 2.6.1 through 2.6.13

CWE

CWE-754

References

https://community.openvpn.net/openvpn/wiki/CVE-2025-2704
https://www.mail-archive.com/openvpn-announce@lists.sourceforge.net/msg00142.html

ADP enrichment

CVE

No English description supplied.

http://www.openwall.com/lists/oss-security/2025/04/02/5

CISA-ADP

No English description supplied.

No references supplied.