USN-7411-1: OpenVPN vulnerability

USN-7411-1: OpenVPN vulnerability
3 April 2025

OpenVPN could be made to crash if it received specially crafted network traffic.

Releases

• Ubuntu 24.10 Ubuntu 24.04 LTS

Packages

• openvpn - virtual private network software

Details
It was discovered that OpenVPN incorrectly handled certain malformed
packets. A remote attacker could possibly use this issue to cause OpenVPN
to crash, resulting in a denial of service.

Update instructions
The problem can be corrected by updating your system to the following package versions:

Ubuntu 24.10

• openvpn - 2.6.12-1ubuntu1.2
  Ubuntu 24.04
• openvpn - 2.6.12-0ubuntu0.24.04.3
  After a standard system update you need to reboot your computer to make all
  the necessary changes.