Skip to content
OpenAdvisories
Medium · 5.5 CVE-2025-50054 EUVD-2025-18726GHSA-c5v3-f4mm-7xmw

Buffer overflow in OpenVPN ovpn-dco-win version 1.3.0 and earlier and version 2.5.8 and earlier allows a local user process to send a too l…

Published Jun 20, 2025 · Updated Jun 23, 2025 · Assigned by OpenVPN

Description

Buffer overflow in OpenVPN ovpn-dco-win version 1.3.0 and earlier and version 2.5.8 and earlier allows a local user process to send a too large control message buffer to the kernel driver resulting in a system crash

Affected products

VendorProductAffectedFixed
OpenVPN ovpn-dco-win < 1.3.1, < 2.5.9 1.3.1

Advisories 1

References