OP
Product
OpenVPN-GUI
4
CVEs
0
On KEV
9.8
Max CVSS
0
New 30D
Severity mix
Critical 1High 2Medium 0Low 1
Watch
Add OpenVPN-GUI to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2024-1305 | 9.8 | Jul 8 | tap-windows6 driver version 9.26 and earlier does not properly check the size data of incomming write operations which an attacker can use to overflow memory buffers, resulting… Affected: 2.6.9 and earlier |
| CVE-2023-7235 | 8.4 | Feb 21 | The OpenVPN GUI installer before version 2.6.9 did not set the proper access control restrictions to the installation directory of OpenVPN binaries when using a non-standard… Affected: before 2.6.9 |
| CVE-2024-27459 | 7.8 | Jul 8 | The interactive service in OpenVPN 2.6.9 and earlier allows an attacker to send data causing a stack overflow which can be used to execute arbitrary code with more privileges Affected: 2.6.9 and earlier |
| CVE-2024-5198 | 3.3 | Jan 15 | OpenVPN ovpn-dco for Windows version 1.1.1 allows an unprivileged local attacker to send I/O control messages with invalid data to the driver resulting in a NULL pointer… Affected: 2.6.10-I002 |
Showing 4