← Database

CVE-2024-5198

LOW CVSS: 3.3 Published: 2025-01-15 Modified: 2026-06-17

Description

OpenVPN ovpn-dco for Windows version 1.1.1 allows an unprivileged local attacker to send I/O control messages with invalid data to the driver resulting in a NULL pointer dereference leading to a system halt.

Affected Platforms

Openvpn Ovpn-Dco-Win

Weakness Type

CWE-476

References