Skip to content
CVE PROGRAM SOURCE RECORD8.7 High

CVE-2026-84732

Retransmissions of ACK packet ID in OpenVPN through 2.6.22 and 2.7.6 allow remote unauthenticated attackers to cause a denial of service via crafted inputs that trigger a timeout i

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
OpenVPN

Description

Retransmissions of ACK packet ID in OpenVPN through 2.6.22 and 2.7.6 allow remote unauthenticated attackers to cause a denial of service via crafted inputs that trigger a timeout integer overflow

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

OpenVPN OpenVPN

Default version status: unaffected

  • 0 to ≤ 2.6.22affected
  • 0 to ≤ 2.7.6affected

References