CVE-2024-27459

Source
https://cve.org/CVERecord?id=CVE-2024-27459
Import Source
https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2024-27459.json
JSON Data
https://api.osv.dev/v1/vulns/CVE-2024-27459
Published
2024-07-08T11:15:10.303Z
Modified
2026-02-07T05:28:22.330163Z
Severity
  • 7.8 (High) CVSS_V3 - CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H CVSS Calculator
Summary
[none]
Details

The interactive service in OpenVPN 2.6.9 and earlier allows an attacker to send data causing a stack overflow which can be used to execute arbitrary code with more privileges.

References

Affected packages

Git / github.com/openvpn/openvpn

Affected ranges

Affected versions

v2.*
v2.6.0
v2.6.1
v2.6.2
v2.6.3
v2.6.4
v2.6.5
v2.6.6
v2.6.7
v2.6.8
v2.6.9

Database specific

source
"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2024-27459.json"