CVE-2025-13086

Public on 2025-11-21

Modified on 2025-11-21

Description

HMAC verification check: fix incorrect memcmp() call

NOTE: https://community.openvpn.net/Security%20Announcements/CVE-2025-13086

Severity

Important

See what this means

CVSS v3 Base Score

7.5

See breakdown

Affected Packages

Platform	Package	Release Date	Advisory	Status
Amazon Linux 2023	openvpn			Pending Fix

	Score Type	Score	Vector
Amazon Linux	CVSSv3	7.5	CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H