Aws Client VPN vulnerabilities

2 known vulnerabilities in Aws Client VPN from Amazon. 2 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 7.1 High severity

  aws_client_vpn: Buffer Copy without Checking Size of Input

  CVE-2024-30165May 28, 2024Amazon

  Amazon AWS Client VPN before 3.9.1 on macOS has a buffer overflow that could potentially allow a local actor to execute arbitrary commands with elevated permissions, a different vulnerability than CVE-2024-30164.

• 7.0 High severity

  Aws Client VPN: Time-of-check Time-of-use (TOCTOU) Race Condition

  CVE-2022-25165Apr 14, 2022Amazon

  An issue was discovered in Amazon AWS VPN Client 2.0.0. A TOCTOU race condition exists during the validation of VPN configuration files. This allows parameters outside of the AWS VPN Client allow list to be injected into the configuration file prior to the AWS