CVE-2025-15497

N/A

Description

Insufficient epoch key slot processing in OpenVPN 2.7_alpha1 through 2.7_rc5 allows remote authenticated users to trigger an assert resulting in a denial of service

CVE Details

CVSS v3.1 ScoreN/A

Published1/30/2026

Last Modified2/4/2026

Sourcenvd

Honeypot Sightings0

Weaknesses (CWE)

CWE-617

References

https://community.openvpn.net/Security%20Announcements/CVE-2025-15497(security@openvpn.net)

https://www.mail-archive.com/openvpn-announce@lists.sourceforge.net/msg00156.html(security@openvpn.net)

IOC Correlations

No correlations recorded

This product uses data from the NVD API but is not endorsed or certified by the NVD.