CVE-2025-59691 (CNNVD-202509-2843)
中文标题:
PureVPN 安全漏洞
英文标题:
PureVPN client applications on Linux through September 2025 allow IPv6 traffic to leak outside the V...
漏洞描述
中文描述:
PureVPN是PureVPN公司的一个 VPN 软件。 PureVPN CLI 2.0.1版本和GUI 2.10.0版本存在安全漏洞，该漏洞源于IPv6流量在网络事件后泄露，可能导致用户隐私泄露。
英文描述:
PureVPN client applications on Linux through September 2025 allow IPv6 traffic to leak outside the VPN tunnel upon network events such as Wi-Fi reconnect or system resume. In the CLI client, the VPN auto-reconnects and claims to be connected, but IPv6 traffic is no longer routed or blocked. In the GUI client, the IPv6 connection remains functional after disconnection until the user clicks Reconnect. In both cases, the real IPv6 address is exposed to external services, violating user privacy and defeating the advertised IPv6 leak protection. This affects CLI 2.0.1 and GUI 2.10.0.
CWE类型:
标签:
受影响产品
| 厂商 | 产品 | 版本 | 版本范围 | 平台 | CPE |
|---|---|---|---|---|---|
| PureVPN | PureVPN | CLI 2.0.1 | - | - |
cpe:2.3:a:purevpn:purevpn:cli_2.0.1:*:*:*:*:*:*:*
|
| PureVPN | PureVPN | GUI 2.10.0 | - | - |
cpe:2.3:a:purevpn:purevpn:gui_2.10.0:*:*:*:*:*:*:*
|
解决方案
中文解决方案:
英文解决方案:
临时解决方案:
参考链接
cve.org
CVSS评分详情
3.1 (cna)
LOWCVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N
时间信息
利用信息
数据源详情
| 数据源 | 记录ID | 版本 | 提取时间 |
|---|---|---|---|
| CVE | cve_CVE-2025-59691 |
2025-11-11 15:23:31 | 2025-11-11 07:40:47 |
| NVD | nvd_CVE-2025-59691 |
2025-11-11 15:01:03 | 2025-11-11 07:48:33 |
| CNNVD | cnnvd_CNNVD-202509-2843 |
2025-11-11 15:12:57 | 2025-11-11 08:00:12 |
版本与语言
安全公告
变更历史
查看详细变更
- vulnerability_type: 未提取 -> 其他
- cnnvd_id: 未提取 -> CNNVD-202509-2843
- data_sources: ['cve', 'nvd'] -> ['cnnvd', 'cve', 'nvd']
查看详细变更
- data_sources: ['cve'] -> ['cve', 'nvd']