Ovpn Dco Win

ovpn-dco-win

Vendor: Openvpn • 3 CVEs

CVEs (3)

CVE VENDORS PRODUCTS UPDATED PUBLISHED CVSS
CVE-2026-11604 1Openvpn 2Openvpn Ovpn Dco Win Sep 24, 2026 Jun 10, 2026 5.6 MEDIUM· v4 6.5 MEDIUM· v3 N/A· v2 An incorrect buffer size calculation in the epoch key generator in OpenVPN ovpn-dco-win version 2.0.0 through 2.8.3 allows a remote authenticated peer to trigger a heap-based buffer overflow and kernel memory corruption...Show more An incorrect buffer size calculation in the epoch key generator in OpenVPN ovpn-dco-win version 2.0.0 through 2.8.3 allows a remote authenticated peer to trigger a heap-based buffer overflow and kernel memory corruption via a crafted data packet, resulting in a system crash (denial of service).Show less
CVE-2025-50054 1Openvpn 1Ovpn Dco Win Jun 17, 2026 Jun 20, 2025 N/A· v4 5.5 MEDIUM· v3 N/A· v2 Buffer overflow in OpenVPN ovpn-dco-win version 1.3.0 and earlier and version 2.5.8 and earlier allows a local user process to send a too large control message buffer to the kernel driver resulting in a system crash
CVE-2024-5198 1Openvpn 1Ovpn Dco Win Jun 17, 2026 Jan 15, 2025 N/A· v4 3.3 LOW· v3 N/A· v2 OpenVPN ovpn-dco for Windows version 1.1.1 allows an unprivileged local attacker to send I/O control messages with invalid data to the driver resulting in a NULL pointer dereference leading to a system halt.