Google Tunnelblick vulnerabilities

7 vulnerabilities

Known vulnerabilities in Google Tunnelblick, newest first, with CVSS severity, EPSS, KEV listings, ransomware use and the affected versions.

1.2CVE-2012-4676googletunnelblick
EPSS score
0.19%
The errorExitIfAttackViaString function in Tunnelblick 3.3beta20 and earlier allows local users to delete arbitrary files by constructing a (1) symlink or (2) hard link, a different vulnerability than CVE-2012-3485.4.4CVE-2012-4677googletunnelblick
EPSS score
0.15%
Tunnelblick 3.3beta20 and earlier allows local users to gain privileges by using a crafted Info.plist file to control the gOkIfNotSecure value.1.2CVE-2012-3487googletunnelblick
EPSS score
0.12%
Race condition in Tunnelblick 3.3beta20 and earlier allows local users to kill unintended processes by waiting for a specific PID value to be assigned to a target process.7.2CVE-2012-3484googletunnelblick
EPSS score
0.18%
Tunnelblick 3.3beta20 and earlier relies on a test for specific ownership and permissions to determine whether a program can be safely executed, which allows local users to bypass intended access restrictions and gain privileges via a (1) user-mountable image or (2) network share.6.2CVE-2012-3483googletunnelblick
EPSS score
0.26%
Race condition in the runScript function in Tunnelblick 3.3beta20 and earlier allows local users to gain privileges by replacing a script file.6.9CVE-2012-3486googletunnelblick
EPSS score
0.28%
Tunnelblick 3.3beta20 and earlier allows local users to gain privileges via an OpenVPN configuration file that specifies execution of a script upon occurrence of an OpenVPN event.7.2CVE-2012-3485googletunnelblick
EPSS score
3.78%
Tunnelblick 3.3beta20 and earlier relies on argv[0] to determine the name of an appropriate (1) kernel module pathname or (2) executable file pathname, which allows local users to gain privileges via an execl system call.