The Windows interactive service in OpenVPN 2.7_alpha1 through 2.7.4 allows remote attackers to cause persistent DNS state pollution or a service crash via a crafted search domain during the disconnection process

The remote SUSE Linux SLED15 / SLED_SAP15 / SLES15 / SLES_SAP15 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2026:3596-1 advisory.

    - CVE-2026-11771: NTLM proxy auth stack off-by-one write (bsc#1273126).
    - CVE-2026-12932: memory leak using --tls-crypt-v2 (bsc#1273127).
    - CVE-2026-12996: Potential DoS and memory leak via TLS session use-after-free (bsc#1273128).
    - CVE-2026-13117: Heap use-after-free via incomplete guard in check_session_buf_not_used() (bsc#1273129).
    - CVE-2026-13379: Windows interactive service DNS SearchList state pollution (bsc#1273130).
    - CVE-2026-35058: improper validation of packet length can lead to a denial of service (bsc#1267945).
    - CVE-2026-40215: race condition during TLS session promotion can lead to a use-after-free (bsc#1267944).

Tenable has extracted the preceding description block directly from the SUSE security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

According to its self-reported version number, the version of OpenVPN installed on the remote Windows host is 2.7_alpha1 through 2.7.4. It is, therefore, affected by a denial of service vulnerability:

  - The Windows interactive service in OpenVPN 2.7_alpha1 through 2.7.4 allows remote attackers to cause     persistent DNS state pollution or a service crash via a crafted search domain during the disconnection     process. (CVE-2026-13379)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available.

  - The Windows interactive service in OpenVPN 2.7_alpha1 through 2.7.4 allows remote attackers to cause     persistent DNS state pollution or a service crash via a crafted search domain during the disconnection     process (CVE-2026-13379)

Note that Nessus relies on the presence of the package as reported by the vendor.

ID	Name	Product	Family	Type	Severity
335070	SUSE SLED15: openvpn / openvpn-auth-pam-plugin / openvpn-dco / openvpn-dco-devel / etc (SUSE-SU-2026:3596-1)	Nessus	SuSE Local Security Checks	Local	high
335012	OpenVPN 2.7_alpha1 < 2.7.5 DNS State Pollution / DoS (CVE-2026-13379)	Nessus	Windows	Local	medium
331394	Linux Distros Unpatched Vulnerability : CVE-2026-13379	Nessus	Misc.	Local	medium

Detections

Analytics

CVE-2026-13379

medium

Tenable Plugins

high

medium

medium