BSD Portsopenvpn -- server-side denial-of-service vulnerability with tls-crypt-v2
Gert Doering reports: OpenVPN servers between 2.6.1 and 2.6.13 using --tls-crypt-v2 can be made to abort with an ASSERT() message by sending a particular combination of authenticated and malformed packets. To trigger the bug, a valid tls-crypt-v2 client key is needed, or network observation of a handshake with a valid tls-crypt-v2 client key No crypto integrity is violated, no data is leaked, and no remote code …
Affected versions
- openvpn >= 2.6.1 < 2.6.14
- openvpn-devel < g20250402,1
By system
0 still vulnerable, 3 fixed. Where VuXML applies (FreeBSD, DragonFly, FreeBSD's derivatives) a port is vulnerable while its version is in a range; pkgsrc says itself whether it lists a CVE of this advisory; OpenBSD and MidnightBSD keep no list this site reads, so their row is only an estimate: FreeBSD's ranges applied to upstream's version.
| System | Port | Version | State | Fixed |
|---|---|---|---|---|
| DragonFly | security/openvpn | 2.6.14 | fixed | |
| OpenBSD | net/openvpn | 2.7.8 | out of range, by version | |
| NetBSD | net/openvpn | 2.7.7 | not listed | |
| MidnightBSD | security/openvpn | 2.6.14_1 | out of range, by version | |
| FreeBSD | security/openvpn | 2.7.8 | fixed | (455 days after) |
| FreeBSD | security/openvpn-devel | g20260907,2 | fixed | (479 days after) |