60
CVE-2024-27459
—CVSS 3.1
7.8 high
EPSS
8%p95
Published
()
Modified
Description
The interactive service in OpenVPN 2.6.9 and earlier allows an attacker to send data causing a stack overflow which can be used to execute arbitrary code with more privileges.
- Vendors
- openvpn
- Products
- openvpn
- Weakness
- CWE-121, CWE-787
- Vector
- CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H