Skip to content
OpenAdvisories
Low · 3.3 CVE-2024-5198 EUVD-2024-47163GHSA-cp7w-whjm-pp36

OpenVPN ovpn-dco for Windows version 1.1.1 allows an unprivileged local attacker to send I/O control messages with invalid data to the driv…

Published Jan 15, 2025 · Updated Jan 15, 2025 · Assigned by OpenVPN

Vendor: OpenVPN Product: OpenVPN-GUI Product: ovpn-dco

Description

OpenVPN ovpn-dco for Windows version 1.1.1 allows an unprivileged local attacker to send I/O control messages with invalid data to the driver resulting in a NULL pointer dereference leading to a system halt.

Affected products

VendorProductAffectedFixed
OpenVPN ovpn-dco 1.1.1 —
OpenVPN OpenVPN-GUI 2.6.10-I002 —

References