Out-of-bounds Read in Openvpn
CVE-2026-13379
The Windows interactive service in OpenVPN 2.7_alpha1 through 2.7.4 allows remote attackers to cause persistent DNS state pollution or a service crash via a crafted search domain during the disconnection process
Vulnerability class: Buffer Overflow
Affected products
- Openvpn — versions 2.7_alpha1
Weakness classification (CWE)
References
- security@openvpn.net (vendor-advisory)
- security@openvpn.net (release-notes)