// For flags

CVE-2024-1305

 

Severity Score

9.8
*CVSS v3.1

Exploit Likelihood

*EPSS

Affected Versions

*CPE

Public Exploits

0
*Multiple Sources

Exploited in Wild

-
*KEV

Decision

Attend
*SSVC
Descriptions

tap-windows6 driver version 9.26 and earlier does not properly
check the size data of incomming write operations which an attacker can
use to overflow memory buffers, resulting in a bug check and potentially
arbitrary code execution in kernel space

La versión 9.26 y anteriores del controlador tap-windows6 no verifica correctamente los datos de tamaño de las operaciones de escritura entrantes que un atacante puede usar para desbordar los búfers de memoria, lo que resulta en una verificación de errores y la ejecución de código potencialmente arbitrario en el espacio del kernel.

*Credits: N/A
CVSS Scores
Attack Vector
Network
Attack Complexity
Low
Privileges Required
None
User Interaction
None
Scope
Unchanged
Confidentiality
High
Integrity
High
Availability
High
* Common Vulnerability Scoring System
SSVC
  • Decision:Attend
Exploitation
None
Automatable
Yes
Tech. Impact
Total
* Organization's Worst-case Scenario
Timeline
  • 2024-02-07 CVE Reserved
  • 2024-07-08 CVE Published
  • 2024-07-09 EPSS Updated
  • 2024-08-23 CVE Updated
  • ---------- Exploited in Wild
  • ---------- KEV Due Date
  • ---------- First Exploit
CWE
  • CWE-190: Integer Overflow or Wraparound
CAPEC
Affected Vendors, Products, and Versions
Vendor Product Version Other Status
Vendor Product Version Other Status <-- --> Vendor Product Version Other Status
OpenVPN
Search vendor "OpenVPN"
 Tap-windows6
Search vendor "OpenVPN" for product "Tap-windows6"
 9.26
Search vendor "OpenVPN" for product "Tap-windows6" and version "9.26"
en
Affected
OpenVPN
Search vendor "OpenVPN"
 OpenVPN-GUI
Search vendor "OpenVPN" for product "OpenVPN-GUI"
 2.6.9
Search vendor "OpenVPN" for product "OpenVPN-GUI" and version "2.6.9"
en
Affected