Skip to content
OpenAdvisories
Medium · 5.6 CVE-2026-2738 EUVD-2026-8311GHSA-4jg5-735x-q4x2

Buffer overflow in ovpn‑dco‑win version 2.8.0 allows local attackers to cause a system crash by sending too large packets to the remote pee…

Published Feb 19, 2026 · Updated Feb 20, 2026 · Assigned by OpenVPN

Description

Buffer overflow in ovpn‑dco‑win version 2.8.0 allows local attackers to cause a system crash by sending too large packets to the remote peer when the AEAD tag appears at the end of the encrypted packet

Affected products

VendorProductAffectedFixed
OpenVPN ovpn-dco-win 2.8.0 —

Advisories 1

References