Description
tap-windows6 driver version 9.26 and earlier does not properly
check the size data of incomming write operations which an attacker can
use to overflow memory buffers, resulting in a bug check and potentially
arbitrary code execution in kernel space
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| OpenVPN | tap-windows6 | 9.26 or earlier | — |
| OpenVPN | OpenVPN-GUI | 2.6.9 and earlier | — |
Advisories 4
- NCSC-2025-0077 Kwetsbaarheden verholpen in Siemens producten NCSC-NL (Netherlands) · Mar 11, 2025
- ICSA-25-072-10 Siemens SINEMA Remote Connect Client CISA ICS & IT advisories · Mar 11, 2025
- SSA-615740 SSA-615740: Multiple Vulnerabilities in SINEMA Remote Connect Client Before V3.2 SP3 Siemens ProductCERT · Mar 11, 2025
- WID-SEC-2024-0688 OpenVPN: Mehrere Schwachstellen BSI CERT-Bund (WID) · Nov 24, 2024