PT-2025-48947 · Openvpn Technologies · Openvpn

Published 2025-11-28 · Updated 2026-01-30 · CVE-2025-13751

Positive Technologies (AI Summary)

CVSS v3.1

5.5

Medium

Base vector

AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Name of the Vulnerable Software and Affected Versions OpenVPN versions 2.5.0 through 2.7 rc2

Description A local authenticated user can connect to the interactive service agent and trigger an error, resulting in a local denial of service.

Recommendations Update to a version later than 2.7 rc2.

Fix

DoS

Allocation of Resources Without Limits

Weakness Enumeration

CWE-841

CWE-775

CWE-770

Related Identifiers

BDU:2025-16280

CVE-2025-13751

Affected Products

Openvpn

References · 16

• https://bdu.fstec.ru/vul/2025-16280 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2025-13751 · Security Note
• https://community.openvpn.net/Security%20Announcements/CVE-2025-13751 · Vendor Advisory
• https://osv.dev/vulnerability/ALPINE-CVE-2025-13751 · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2025-13751 · Vendor Advisory
• https://security-tracker.debian.org/tracker/CVE-2025-13751 · Vendor Advisory
• https://twitter.com/CVEnew/status/1996261686765117539 · Twitter Post
• https://t.me/cveNotify/150439 · Telegram Post
• https://abf.rosa.ru/advisories/ROSA-SA-2026-3238 · Note
• https://twitter.com/VulmonFeeds/status/1996326423200423960 · Twitter Post
• https://mail-archive.com/[e-mail]/msg00154.html · Note
• https://security.alpinelinux.org/vuln/CVE-2025-13751 · Note
• https://altsp.su/obnovleniya-bezopasnosti · Note
• https://t.me/cveNotify/145612 · Telegram Post
• https://mail-archive.com/[e-mail]/msg00154.htmlhttps: · Note