VULNERABILITY INTELLIGENCE

CVE-2025-15497

EPSS probability0.36%
CISA KEVNot currently listed
Published2026-01-30
Last modified2026-06-17

Description

Insufficient epoch key slot processing in OpenVPN 2.7_alpha1 through 2.7_rc5 allows remote authenticated users to trigger an assert resulting in a denial of service

Weakness classification

  • security@openvpn.net: CWE-617

Primary references