CVE-2024-27459

2024-07-0810:14:06

CWE-121

OpenVPN

github.com

openvpn

cve-2024-27459

stack overflow

arbitrary code

privilege escalation

AI Score

8.1

Confidence

High

SSVC

Exploitation

none

Automatable

Technical Impact

total

JSON

The interactive service in OpenVPN 2.6.9 and earlier allows an attacker to send data causing a stack overflow which can be used to execute arbitrary code with more privileges.

ADP Affected

[
  {
    "cpes": [
      "cpe:2.3:a:openvpn:openvpn_gui:*:*:*:*:*:*:*:*"
    ],
    "vendor": "openvpn",
    "product": "openvpn_gui",
    "versions": [
      {
        "status": "affected",
        "version": "0",
        "versionType": "custom",
        "lessThanOrEqual": "2.6.9"
      }
    ],
    "defaultStatus": "unknown"
  }
]