Nixpkgs security tracker

Permalink CVE-2025-15497

created 2 months, 2 weeks ago

Insufficient epoch key slot processing in OpenVPN 2.7_alpha1 through 2.7_rc5 …

Insufficient epoch key slot processing in OpenVPN 2.7_alpha1 through 2.7_rc5 allows remote authenticated users to trigger an assert resulting in a denial of service

References

https://community.openvpn.net/Security%20Announcements/CVE-2025-15497 vendor-advisory
https://www.mail-archive.com/openvpn-announce@lists.sourceforge.net/msg00156.ht… release-notes

Affected products

OpenVPN

=<2.7_rc5

Matching in nixpkgs

pkgs.openvpn

Robust and highly flexible tunneling application

nixos-unstable 2.6.14
- nixpkgs-unstable 2.6.14
- nixos-unstable-small 2.6.14
nixos-25.11 2.6.14
- nixpkgs-25.11-darwin 2.6.14

pkgs.openvpn3

OpenVPN 3 Linux client

nixos-unstable 25
- nixpkgs-unstable 25
- nixos-unstable-small 25
nixos-25.11 25
- nixpkgs-25.11-darwin 25

pkgs.check-openvpn

Nagios/icinga/sensu check plugin for OpenVPN

nixos-unstable 0.0.1
- nixpkgs-unstable 0.0.1
- nixos-unstable-small 0.0.1

pkgs.openvpn-auth-ldap

LDAP authentication plugin for OpenVPN

nixos-unstable 2.0.4
- nixpkgs-unstable 2.0.4
- nixos-unstable-small 2.0.4
nixos-25.11 2.0.4
- nixpkgs-25.11-darwin 2.0.4

pkgs.namespaced-openvpn

Network namespace isolation for OpenVPN tunnels

nixos-unstable 0.6.0
- nixpkgs-unstable 0.6.0
- nixos-unstable-small 0.6.0
nixos-25.11 0.6.0
- nixpkgs-25.11-darwin 0.6.0

pkgs.openvpn_learnaddress

Openvpn learn-address script to manage a hosts-like file

nixos-unstable 2013-10-21
- nixpkgs-unstable 2013-10-21
- nixos-unstable-small 2013-10-21
nixos-25.11 2013-10-21
- nixpkgs-25.11-darwin 2013-10-21

pkgs.networkmanager-openvpn

NetworkManager's OpenVPN plugin

nixos-unstable 1.12.0
- nixpkgs-unstable 1.12.0
- nixos-unstable-small 1.12.0
nixos-25.11 1.12.3
- nixpkgs-25.11-darwin 1.12.3

pkgs.nagiosPlugins.check_openvpn