OpenVPN-GUI vulnerabilities

3 known vulnerabilities in OpenVPN-GUI from OpenVPN. 3 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 9.8 Critical severity

  tap-windows6: Integer Overflow or Wraparound

  CVE-2024-1305Jul 8, 2024OpenVPNEPSS 15.4%

  tap-windows6 driver version 9.26 and earlier does not properly check the size data of incomming write operations which an attacker can use to overflow memory buffers, resulting in a bug check and potentially arbitrary code execution in kernel space

• 7.8 High severity

  OpenVPN GUI: Out-of-bounds Write

  CVE-2024-27459Jul 8, 2024OpenVPNEPSS 8.26%

  The interactive service in OpenVPN 2.6.9 and earlier allows an attacker to send data causing a stack overflow which can be used to execute arbitrary code with more privileges.

• 8.4 High severity

  OpenVPN: Incorrect Default Permissions

  CVE-2023-7235Feb 21, 2024OpenVPN

  The OpenVPN GUI installer before version 2.6.9 did not set the proper access control restrictions to the installation directory of OpenVPN binaries when using a non-standard installation path, which allows an attacker to replace binaries to run arbitrary execu