Debian/openvpn: unknown
Retransmissions of ACK packet ID in OpenVPN through 2.6.22 and 2.7.6 allow remote unauthenticated attackers to cause a denial of service via crafted inputs that trigger a timeout integer overflow
Action: Upgrade openvpn to 2.7.7-1 or later.
Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 2.7.7-1 | - |
Fixed versions
| 2.7.7-1 |
Sources
- osv: DEBIAN-CVE-2026-84732#Debian:14/openvpn
- https://security-tracker.debian.org/tracker/CVE-2026-84732
published · modified · JSON