Vulnerability Database

309,237

Total vulnerabilities in the database

CVE-2024-5198

OpenVPN ovpn-dco for Windows version 1.1.1 allows an unprivileged local attacker to send I/O control messages with invalid data to the driver resulting in a NULL pointer dereference leading to a system halt.

  • Published: Jan 15, 2025
  • Updated: Nov 16, 2025
  • CVE: CVE-2024-5198
  • Severity: Low
  • Exploit:

CVSS v3:

  • Severity: Low
  • Score: 3.3
  • AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L

CWEs:

Software From Fixed in
openvpn / ovpn-dco-win 1.1.1 1.1.1.x