{"dataType": "CVE_RECORD", "dataVersion": "5.1", "cveMetadata": {"cveId": "CVE-2025-2704", "assignerOrgId": "36a55730-e66d-4d39-8ca6-3c3b3017965e", "state": "PUBLISHED", "assignerShortName": "OpenVPN", "dateReserved": "2025-03-24T10:26:42.493Z", "datePublished": "2025-04-02T21:00:58.582Z", "dateUpdated": "2025-04-03T00:11:05.289Z"}, "containers": {"cna": {"providerMetadata": {"orgId": "36a55730-e66d-4d39-8ca6-3c3b3017965e", "shortName": "OpenVPN", "dateUpdated": "2025-04-02T21:00:58.582Z"}, "problemTypes": [{"descriptions": [{"lang": "en", "cweId": "CWE-754", "description": "CWE-754 Improper Check for Unusual or Exceptional Conditions", "type": "CWE"}]}], "affected": [{"vendor": "OpenVPN", "product": "OpenVPN", "versions": [{"status": "affected", "version": "2.6.1", "lessThanOrEqual": "2.6.13", "versionType": "semver"}], "defaultStatus": "unaffected"}], "descriptions": [{"lang": "en", "value": "OpenVPN version 2.6.1 through 2.6.13 in server mode using TLS-crypt-v2 allows remote attackers to trigger a denial of service by corrupting and replaying network packets in the early handshake phase"}], "references": [{"url": "https://community.openvpn.net/openvpn/wiki/CVE-2025-2704"}]}, "adp": [{"title": "CVE Program Container", "references": [{"url": "http://www.openwall.com/lists/oss-security/2025/04/02/5"}], "providerMetadata": {"orgId": "af854a3a-2127-422b-91ae-364da2661108", "shortName": "CVE", "dateUpdated": "2025-04-03T00:11:05.289Z"}}]}}

{}

{"cveTags": [], "descriptions": [{"lang": "en", "value": "OpenVPN version 2.6.1 through 2.6.13 in server mode using TLS-crypt-v2 allows remote attackers to trigger a denial of service by corrupting and replaying network packets in the early handshake phase"}], "id": "CVE-2025-2704", "lastModified": "2025-04-03T02:15:20.240", "metrics": {}, "published": "2025-04-02T21:15:32.943", "references": [{"source": "security@openvpn.net", "url": "https://community.openvpn.net/openvpn/wiki/CVE-2025-2704"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "url": "http://www.openwall.com/lists/oss-security/2025/04/02/5"}], "sourceIdentifier": "security@openvpn.net", "vulnStatus": "Received", "weaknesses": [{"description": [{"lang": "en", "value": "CWE-754"}], "source": "security@openvpn.net", "type": "Secondary"}]}

{}