Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
2 selected

3 records

Vendor: OpenVPN Component: Ovpn-dco-win Clear all filters
TI-2026-10019 CVE-2026-11604 · GHSA-f6c5-28vq-94w2

Heap-based buffer overflow in OpenVPN ovpn-dco-win

Priority LOW 25

An incorrect buffer size calculation in the epoch key generator in OpenVPN ovpn-dco-win version 2.0.0 through 2.8.3 allows a remote authenticated peer to trigger a heap-based buffer overflow and kernel memory corruption…

CVSS 4.0MEDIUM 5.6 Local Low privileges User interaction EPSS 0.00338 Published 2026-06-10 No fix listed CWE-122
TI-2025-31967 CVE-2025-50054 · GHSA-c5v3-f4mm-7xmw

Heap-based buffer overflow in OpenVPN ovpn-dco-win

Priority LOW 24

Buffer overflow in OpenVPN ovpn-dco-win version 1.3.0 and earlier and version 2.5.8 and earlier allows a local user process to send a too large control message buffer to the kernel driver resulting in a system crash

CVSS 3.1MEDIUM 5.5 Local Low privileges No interaction EPSS 0.00246 Published 2025-06-20 Fixed in 1.3.1, 2.5.9 CWE-122
TI-2024-04824 CVE-2024-5198 · GHSA-cp7w-whjm-pp36

NULL pointer dereference in OpenVPN ovpn-dco

Priority LOW 15

OpenVPN ovpn-dco for Windows version 1.1.1 allows an unprivileged local attacker to send I/O control messages with invalid data to the driver resulting in a NULL pointer dereference leading to a system halt.

CVSS 3.1LOW 3.3 Local Low privileges No interaction EPSS 0.0014 Published 2025-01-15 No fix listed CWE-476