Openvpn Gui vulnerabilities

2 vulnerabilities

Known vulnerabilities in Openvpn Gui, newest first, with CVSS severity, EPSS, KEV listings, ransomware use and the affected versions.

7.8CVE-2024-27459openvpnopenvpn+1
EPSS score
8.26%
The interactive service in OpenVPN 2.6.9 and earlier allows an attacker to send data causing a stack overflow which can be used to execute arbitrary code with more privileges.8.4CVE-2023-7235chainguardopenvpn+3
EPSS score
0.21%
The OpenVPN GUI installer before version 2.6.9 did not set the proper access control restrictions to the installation directory of OpenVPN binaries when using a non-standard installation path, which allows an attacker to replace binaries to run arbitrary executables.