CVE-2025-13086
published 2025-12-03CVE-2025-13086: Improper validation of source IP addresses in OpenVPN version 2.6.0 through 2.6.15 and 2.7_alpha1 through 2.7_rc1 allows an attacker to open a session from a…
PriorityP342high7.5CVSS 3.1
AVNACLPRNUINSUCNINAH
EPSS
0.62%
45.8th percentile
Improper validation of source IP addresses in OpenVPN version 2.6.0 through 2.6.15 and 2.7_alpha1 through 2.7_rc1 allows an attacker to open a session from a different IP address which did not initiate the connection resulting in a denial of service for the originating client
Affected
8 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| debian | openvpn | < openvpn 2.6.3-1+deb12u4 (bookworm) | openvpn 2.6.3-1+deb12u4 (bookworm) |
| openvpn | openvpn | — | — |
| openvpn | openvpn | >= 0 < 2.6.3-1+deb12u4 | 2.6.3-1+deb12u4 |
| openvpn | openvpn | >= 0 < 2.6.14-1+deb13u1 | 2.6.14-1+deb13u1 |
| openvpn | openvpn | >= 0 < 2.7.0~rc2-2 | 2.7.0~rc2-2 |
| openvpn | openvpn | >= 2.6.0 < 2.6.16 | 2.6.16 |
| openvpn | openvpn | 2.6.0 – 2.6.15 | — |
| openvpn | openvpn | 2.7_alpha1 – 2.7_rc1 | — |
CVSS provenance
nvdv3.17.5HIGHCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
nvdv4.04.6MEDIUMCVSS:4.0/AV:N/AC:H/AT:P/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:U/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
osv4.6MEDIUM
vendor_debian4.6MEDIUM
vendor_redhat4.6MEDIUM
Stop checking back — get the weekly exploitation signal.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
Red Hat
OpenVPN: OpenVPN: Improper validation of source IP addresses leads to denial of service
vendor_redhat·2025-12-03·CVSS 4.6
CVE-2025-13086 [MEDIUM] CWE-940 OpenVPN: OpenVPN: Improper validation of source IP addresses leads to denial of service
OpenVPN: OpenVPN: Improper validation of source IP addresses leads to denial of service
Improper validation of source IP addresses in OpenVPN version 2.6.0 through 2.6.15 and 2.7_alpha1 through 2.7_rc1 allows an attacker to open a session from a different IP address which did not initiate the connection resulting in a denial of service for the originating client
A flaw was found in OpenVPN. This vulnerability allows a denial of service (DoS) for the originating client via improper validation of source Internet Protocol (IP) addresses, allowing an attacker to open a session from a different IP address which did not initiate the connection.
Statement: This vulnerability is rated Moderate for Red Hat. Improper validation of source IP addresses in OpenVPN allows an attacker to open a sessio
Ubuntu
OpenVPN vulnerability
vendor_ubuntu·2025-11-27
CVE-2025-13086 OpenVPN vulnerability
Title: OpenVPN vulnerability
Summary: OpenVPN could allow unintended access to network services.
Joshua Rogers discovered that OpenVPN incorrectly handled HMAC verification
checks. A remote attacker could possibly use this issue to bypass source IP
address validation.
Instructions: After a standard system update you need to reboot your computer to make
all the necessary changes.
Debian
CVE-2025-13086: openvpn - Improper validation of source IP addresses in OpenVPN version 2.6.0 through 2.6....
vendor_debian·2025·CVSS 4.6
CVE-2025-13086 [MEDIUM] CVE-2025-13086: openvpn - Improper validation of source IP addresses in OpenVPN version 2.6.0 through 2.6....
Improper validation of source IP addresses in OpenVPN version 2.6.0 through 2.6.15 and 2.7_alpha1 through 2.7_rc1 allows an attacker to open a session from a different IP address which did not initiate the connection resulting in a denial of service for the originating client
Scope: local
bookworm: resolved (fixed in 2.6.3-1+deb12u4)
bullseye: resolved
forky: resolved (fixed in 2.7.0~rc2-2)
sid: resolved (fixed in 2.7.0~rc2-2)
trixie: resolved (fixed in 2.6.14-1+deb13u1)
GHSA
GHSA-xv5w-q5wq-r3c3: Improper validation of source IP addresses in OpenVPN version 2
ghsa_unreviewed·2025-12-03
CVE-2025-13086 [MEDIUM] CWE-940 GHSA-xv5w-q5wq-r3c3: Improper validation of source IP addresses in OpenVPN version 2
Improper validation of source IP addresses in OpenVPN version 2.6.0 through 2.7_rc1 allows an attacker to open a session from a different IP address which did not initiate the connection resulting in a denial of service for the originating client
OSV
CVE-2025-13086: Improper validation of source IP addresses in OpenVPN version 2
osv·2025-12-03·CVSS 4.6
CVE-2025-13086 [MEDIUM] CVE-2025-13086: Improper validation of source IP addresses in OpenVPN version 2
Improper validation of source IP addresses in OpenVPN version 2.6.0 through 2.6.15 and 2.7_alpha1 through 2.7_rc1 allows an attacker to open a session from a different IP address which did not initiate the connection resulting in a denial of service for the originating client
No detection rules found.
No public exploits indexed.
2025-12-03
Published