Description
Improper synchronization in the OpenVPN ovpn-dco-win for Windows versions 0.6.5 through 1.3.5 and 2.4.0 through 2.8.7 allows local attackers to trigger a deadlock via a crafted write to the ovpn-dco device, causing the host to become unresponsive.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| OpenVPN | ovpn-dco-win | 0.6.5 – ≤ 1.3.5, 2.4.0 – ≤ 2.8.7 | — |