¡¾Îó²îͨ¸æ¡¿OpenVPN DCOÇý¶¯³ÌÐò»º³åÇøÒç³öÎó²î (CVE-2025-50054)
Ðû²¼Ê±¼ä 2025-06-23Ò»¡¢Îó²î¸ÅÊö
Îó²îÃû³Æ | OpenVPN DCOÇý¶¯³ÌÐò»º³åÇøÒç³öÎó²î | ||
CVE ID | CVE-2025-50054 | ||
Îó²îÀàÐÍ | »º³åÇøÒç³öÎó²î | ·¢Ã÷ʱ¼ä | 2025-06-23 |
Îó²îÆÀ·Ö | 9.8 | Îó²îÆ·¼¶ | ÑÏÖØ |
¹¥»÷ÏòÁ¿ | ÍâµØ | ËùÐèȨÏÞ | µÍ |
ʹÓÃÄÑ¶È | µÍ | Óû§½»»¥ | ²»ÐèÒª |
PoC/EXP | δ¹ûÕæ | ÔÚҰʹÓà | δ·¢Ã÷ |
OpenVPNÊÇÒ»¿î¿ªÔ´µÄÐéÄâ˽ÈËÍøÂ磨VPN£©Èí¼þ£¬£¬£¬£¬£¬Ê¹ÓÃSSL/TLSÐÒéʵÏÖ¼ÓÃÜͨѶ£¬£¬£¬£¬£¬Ö§³Öµã¶ÔµãºÍÕ¾µãµ½Õ¾µãµÄÇå¾²ÅþÁ¬£¬£¬£¬£¬£¬ÆÕ±éÓ¦ÓÃÓÚÔ¶³Ì»á¼ûºÍÆóÒµÍøÂç¡£¡£¡£ËüÖ§³Ö¶àÖÖÉí·ÝÑéÖ¤·½·¨£¬£¬£¬£¬£¬°üÀ¨Ô¤¹²ÏíÃÜÔ¿¡¢Êý×ÖÖ¤ÊéºÍÓû§Ãû/ÃÜÂë×éºÏ¡£¡£¡£Í¨¹ýʹÓÃOpenSSL¼ÓÃܿ⣬£¬£¬£¬£¬OpenVPNÌṩ¸ß´ï256λµÄ¼ÓÃÜÇ¿¶È£¬£¬£¬£¬£¬²¢Ö§³ÖÍêÉÆÇ°Ïò±£ÃÜ£¨PFS£©¹¦Ð§£¬£¬£¬£¬£¬ÔöÇ¿Êý¾ÝÇå¾²ÐÔ¡£¡£¡£OpenVPN¼æÈݶàÖÖ²Ù×÷ϵͳ£¬£¬£¬£¬£¬ÈçWindows¡¢Linux¡¢macOS¡¢iOSºÍAndroid£¬£¬£¬£¬£¬ÊÊÓÃÓÚ¼ÒÍ¥Óû§¡¢ÆóÒµºÍ¿ª·¢Õߣ¬£¬£¬£¬£¬ÒòÆä¸ßÇå¾²ÐÔ¡¢ÎÞаÐԺͿªÔ´ÌØÕ÷£¬£¬£¬£¬£¬³ÉΪȫÇò×îÊܽӴýµÄVPN½â¾ö¼Æ»®Ö®Ò»¡£¡£¡£
2025Äê6ÔÂ23ÈÕ£¬£¬£¬£¬£¬¼øºÚµ£±£Íø¼¯ÍÅVSRC¼à²âµ½openvpnÐû²¼Ç徲ͨ¸æ£¬£¬£¬£¬£¬Åû¶openvpnÖеÄÒ»¸ö»º³åÇøÒç³öÎó²î¡£¡£¡£¸ÃÎó²î±£´æÓÚOpenVPNµÄWindowsÊý¾ÝͨµÀжÔØÇý¶¯³ÌÐò£¨ovpn-dco-win£©ÖУ¬£¬£¬£¬£¬µ±Óû§¿Õ¼äÀú³ÌÏòÄÚºËÇý¶¯³ÌÐò·¢ËÍÁè¼Ý1500×ֽڵĿØÖÆÐÂÎÅʱ£¬£¬£¬£¬£¬»áµ¼ÖÂWindows DCOÇý¶¯³ÌÐòÍ߽⡣¡£¡£´ËÎó²î½öÄÜͨ¹ýÍâµØÀú³Ì´¥·¢£¬£¬£¬£¬£¬¶ø·ÇÔ¶³Ì¹¥»÷£¬£¬£¬£¬£¬ÇÒ×ÝÈ»ÊÇ·ÇÌØȨÀú³ÌÒ²ÄÜʹÓôËÎó²î¡£¡£¡£OpenVPN×Ô¼º¾ßÓÐÏÞÖÆ£¬£¬£¬£¬£¬²»»á·¢Ëͳ¬³¤ÐÂÎÅ£¬£¬£¬£¬£¬µ«×Ô½ç˵±àÒëµÄOpenVPN»òÆäËûÓëDCOÇý¶¯³ÌÐò½»»¥µÄÀú³Ì¿ÉÄÜÈƹý¸ÃÏÞÖÆ£¬£¬£¬£¬£¬´¥·¢Îó²î¡£¡£¡£¸ÃÎó²î¿ÉÄܵ¼ÖÂϵͳ²»Îȹ̡£¡£¡£
¶þ¡¢Ó°Ïì¹æÄ£
Èý¡¢Çå¾²²½·¥
3.1 Éý¼¶°æ±¾
ÏÂÔØÁ´½Ó£ºhttps://openvpn.net/community-downloads/
¾©¹«Íø°²±¸11010802024551ºÅ