Description
The interactive service in OpenVPN 2.6.9 and earlier allows an attacker to send data causing a stack overflow which can be used to execute arbitrary code with more privileges.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| OpenVPN | OpenVPN GUI | 2.6.9 and earlier | — |
Advisories 4
- NCSC-2025-0077 Kwetsbaarheden verholpen in Siemens producten NCSC-NL (Netherlands) · Mar 11, 2025
- ICSA-25-072-10 Siemens SINEMA Remote Connect Client CISA ICS & IT advisories · Mar 11, 2025
- SSA-615740 SSA-615740: Multiple Vulnerabilities in SINEMA Remote Connect Client Before V3.2 SP3 Siemens ProductCERT · Mar 11, 2025
- WID-SEC-2024-0688 OpenVPN: Mehrere Schwachstellen BSI CERT-Bund (WID) · Nov 24, 2024