41 lines
1.1 KiB
JSON
Raw Normal View History

{
"id": "CVE-2024-27459",
"sourceIdentifier": "security@openvpn.net",
"published": "2024-07-08T11:15:10.303",
"lastModified": "2024-07-08T11:15:10.303",
"vulnStatus": "Received",
"cveTags": [],
"descriptions": [
{
"lang": "en",
"value": "The interactive service in OpenVPN 2.6.9 and earlier allows an attacker to send data causing a stack overflow which can be used to execute arbitrary code with more privileges."
}
],
"metrics": {},
"weaknesses": [
{
"source": "security@openvpn.net",
"type": "Secondary",
"description": [
{
"lang": "en",
"value": "CWE-121"
}
]
}
],
"references": [
{
"url": "https://community.openvpn.net/openvpn/wiki/CVE-2024-27459",
"source": "security@openvpn.net"
},
{
"url": "https://openvpn.net/security-advisory/ovpnx-vulnerability-cve-2024-27903-cve-2024-27459-cve-2024-24974/",
"source": "security@openvpn.net"
},
{
"url": "https://www.mail-archive.com/openvpn-users@lists.sourceforge.net/msg07534.html",
"source": "security@openvpn.net"
}
]
}