CVE-2024-5198 — OpenVPN / ovpn-dco

CVE-2024-5198

OpenVPN / ovpn-dco PUBLISHED

Description (CNA)

OpenVPN ovpn-dco for Windows version 1.1.1 allows an unprivileged local attacker to send I/O control messages with invalid data to the driver resulting in a NULL pointer dereference leading to a system halt.

Affected (CNA)

Vendor / product	Versions
OpenVPN / ovpn-dco	affected 1.1.1
OpenVPN / OpenVPN-GUI	affected 2.6.10-I002

CWE

CWE-476

References

https://community.openvpn.net/openvpn/wiki/CVE-2024-5198

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.