Skip to content
CVE PROGRAM SOURCE RECORD3.3 Low

CVE-2024-5198

OpenVPN ovpn-dco for Windows version 1.1.1 allows an unprivileged local attacker to send I/O control messages with invalid data to the driver resulting in a NULL pointer dereferenc

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
OpenVPN

Description

OpenVPN ovpn-dco for Windows version 1.1.1 allows an unprivileged local attacker to send I/O control messages with invalid data to the driver resulting in a NULL pointer dereference leading to a system halt.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

OpenVPN ovpn-dco

Default version status: unaffected

  • 1.1.1affected

OpenVPN OpenVPN-GUI

Default version status: unaffected

  • 2.6.10-I002affected

References