{"dataType": "CVE_RECORD", "dataVersion": "5.1", "cveMetadata": {"cveId": "CVE-2024-1305", "assignerOrgId": "36a55730-e66d-4d39-8ca6-3c3b3017965e", "state": "PUBLISHED", "assignerShortName": "OpenVPN", "dateReserved": "2024-02-07T13:22:25.493Z", "datePublished": "2024-07-08T17:27:44.097Z", "dateUpdated": "2024-08-23T03:55:36.778Z"}, "containers": {"cna": {"providerMetadata": {"orgId": "36a55730-e66d-4d39-8ca6-3c3b3017965e", "shortName": "OpenVPN", "dateUpdated": "2024-07-08T17:27:44.097Z"}, "problemTypes": [{"descriptions": [{"lang": "en", "cweId": "CWE-190", "description": "Integer Overflow or Wraparound", "type": "CWE"}]}], "affected": [{"vendor": "OpenVPN", "product": "tap-windows6", "platforms": ["Windows"], "versions": [{"status": "affected", "version": "9.26 or earlier"}], "defaultStatus": "unaffected"}, {"vendor": "OpenVPN", "product": "OpenVPN-GUI", "platforms": ["Windows"], "modules": ["tap-windows6"], "versions": [{"status": "affected", "version": "2.6.9 and earlier"}], "defaultStatus": "unaffected"}], "descriptions": [{"lang": "en", "value": "tap-windows6 driver version 9.26 and earlier does not properly \ncheck the size data of incomming write operations which an attacker can \nuse to overflow memory buffers, resulting in a bug check and potentially\n arbitrary code execution in kernel space"}], "references": [{"url": "https://community.openvpn.net/openvpn/wiki/CVE-2024-1305"}, {"url": "https://www.mail-archive.com/openvpn-users@lists.sourceforge.net/msg07534.html"}]}, "adp": [{"affected": [{"vendor": "openvpn", "product": "openvpn_gui", "cpes": ["cpe:2.3:a:openvpn:openvpn_gui:*:*:*:*:*:*:*:*"], "defaultStatus": "unknown", "versions": [{"version": "0", "status": "affected", "lessThanOrEqual": "2.6.9", "versionType": "custom"}]}, {"vendor": "openvpn", "product": "tap_windows6", "cpes": ["cpe:2.3:a:openvpn:tap_windows6:*:*:*:*:*:*:*:*"], "defaultStatus": "unknown", "versions": [{"version": "0", "status": "affected", "lessThanOrEqual": "9.26", "versionType": "custom"}]}], "metrics": [{"cvssV3_1": {"scope": "UNCHANGED", "version": "3.1", "baseScore": 9.8, "attackVector": "NETWORK", "baseSeverity": "CRITICAL", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "integrityImpact": "HIGH", "userInteraction": "NONE", "attackComplexity": "LOW", "availabilityImpact": "HIGH", "privilegesRequired": "NONE", "confidentialityImpact": "HIGH"}}, {"other": {"type": "ssvc", "content": {"timestamp": "2024-08-21T00:00:00+00:00", "options": [{"Exploitation": "none"}, {"Automatable": "yes"}, {"Technical Impact": "total"}], "role": "CISA Coordinator", "version": "2.0.3", "id": "CVE-2024-1305"}}}], "title": "CISA ADP Vulnrichment", "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2024-08-23T03:55:36.778Z"}}, {"providerMetadata": {"orgId": "af854a3a-2127-422b-91ae-364da2661108", "shortName": "CVE", "dateUpdated": "2024-08-01T18:33:25.379Z"}, "title": "CVE Program Container", "references": [{"url": "https://community.openvpn.net/openvpn/wiki/CVE-2024-1305", "tags": ["x_transferred"]}, {"url": "https://www.mail-archive.com/openvpn-users@lists.sourceforge.net/msg07534.html", "tags": ["x_transferred"]}]}]}}

{"dataType": "CVE_RECORD", "containers": {"adp": [{"title": "CVE Program Container", "references": [{"url": "https://community.openvpn.net/openvpn/wiki/CVE-2024-1305", "tags": ["x_transferred"]}, {"url": "https://www.mail-archive.com/openvpn-users@lists.sourceforge.net/msg07534.html", "tags": ["x_transferred"]}], "providerMetadata": {"orgId": "af854a3a-2127-422b-91ae-364da2661108", "shortName": "CVE", "dateUpdated": "2024-08-01T18:33:25.379Z"}}, {"title": "CISA ADP Vulnrichment", "metrics": [{"cvssV3_1": {"scope": "UNCHANGED", "version": "3.1", "baseScore": 9.8, "attackVector": "NETWORK", "baseSeverity": "CRITICAL", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "integrityImpact": "HIGH", "userInteraction": "NONE", "attackComplexity": "LOW", "availabilityImpact": "HIGH", "privilegesRequired": "NONE", "confidentialityImpact": "HIGH"}}, {"other": {"type": "ssvc", "content": {"id": "CVE-2024-1305", "role": "CISA Coordinator", "options": [{"Exploitation": "none"}, {"Automatable": "yes"}, {"Technical Impact": "total"}], "version": "2.0.3", "timestamp": "2024-07-09T15:03:03.273669Z"}}}], "affected": [{"cpes": ["cpe:2.3:a:openvpn:openvpn_gui:*:*:*:*:*:*:*:*"], "vendor": "openvpn", "product": "openvpn_gui", "versions": [{"status": "affected", "version": "0", "versionType": "custom", "lessThanOrEqual": "2.6.9"}], "defaultStatus": "unknown"}, {"cpes": ["cpe:2.3:a:openvpn:tap_windows6:*:*:*:*:*:*:*:*"], "vendor": "openvpn", "product": "tap_windows6", "versions": [{"status": "affected", "version": "0", "versionType": "custom", "lessThanOrEqual": "9.26"}], "defaultStatus": "unknown"}], "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2024-07-09T15:06:12.759Z"}}], "cna": {"affected": [{"vendor": "OpenVPN", "product": "tap-windows6", "versions": [{"status": "affected", "version": "9.26 or earlier"}], "platforms": ["Windows"], "defaultStatus": "unaffected"}, {"vendor": "OpenVPN", "modules": ["tap-windows6"], "product": "OpenVPN-GUI", "versions": [{"status": "affected", "version": "2.6.9 and earlier"}], "platforms": ["Windows"], "defaultStatus": "unaffected"}], "references": [{"url": "https://community.openvpn.net/openvpn/wiki/CVE-2024-1305"}, {"url": "https://www.mail-archive.com/openvpn-users@lists.sourceforge.net/msg07534.html"}], "descriptions": [{"lang": "en", "value": "tap-windows6 driver version 9.26 and earlier does not properly \ncheck the size data of incomming write operations which an attacker can \nuse to overflow memory buffers, resulting in a bug check and potentially\n arbitrary code execution in kernel space"}], "problemTypes": [{"descriptions": [{"lang": "en", "type": "CWE", "cweId": "CWE-190", "description": "Integer Overflow or Wraparound"}]}], "providerMetadata": {"orgId": "36a55730-e66d-4d39-8ca6-3c3b3017965e", "shortName": "OpenVPN", "dateUpdated": "2024-07-08T17:27:44.097Z"}}}, "cveMetadata": {"cveId": "CVE-2024-1305", "state": "PUBLISHED", "dateUpdated": "2024-08-23T03:55:36.778Z", "dateReserved": "2024-02-07T13:22:25.493Z", "assignerOrgId": "36a55730-e66d-4d39-8ca6-3c3b3017965e", "datePublished": "2024-07-08T17:27:44.097Z", "assignerShortName": "OpenVPN"}, "dataVersion": "5.1"}

{"configurations": [{"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:a:openvpn:tap-windows6:*:*:*:*:*:*:*:*", "matchCriteriaId": "1361B991-0259-40EC-89A2-06B591C84F5C", "versionEndIncluding": "9.26.0", "vulnerable": true}], "negate": false, "operator": "OR"}]}], "cveTags": [], "descriptions": [{"lang": "en", "value": "tap-windows6 driver version 9.26 and earlier does not properly \ncheck the size data of incomming write operations which an attacker can \nuse to overflow memory buffers, resulting in a bug check and potentially\n arbitrary code execution in kernel space"}, {"lang": "es", "value": "La versi\u00f3n 9.26 y anteriores del controlador tap-windows6 no verifica correctamente los datos de tama\u00f1o de las operaciones de escritura entrantes que un atacante puede usar para desbordar los b\u00fafers de memoria, lo que resulta en una verificaci\u00f3n de errores y la ejecuci\u00f3n de c\u00f3digo potencialmente arbitrario en el espacio del kernel."}], "id": "CVE-2024-1305", "lastModified": "2025-08-22T15:36:38.907", "metrics": {"cvssMetricV31": [{"cvssData": {"attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "HIGH", "baseScore": 9.8, "baseSeverity": "CRITICAL", "confidentialityImpact": "HIGH", "integrityImpact": "HIGH", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "version": "3.1"}, "exploitabilityScore": 3.9, "impactScore": 5.9, "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "type": "Secondary"}]}, "published": "2024-07-08T18:15:07.150", "references": [{"source": "security@openvpn.net", "tags": ["Vendor Advisory"], "url": "https://community.openvpn.net/openvpn/wiki/CVE-2024-1305"}, {"source": "security@openvpn.net", "tags": ["Release Notes", "Mailing List"], "url": "https://www.mail-archive.com/openvpn-users@lists.sourceforge.net/msg07534.html"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "tags": ["Vendor Advisory"], "url": "https://community.openvpn.net/openvpn/wiki/CVE-2024-1305"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "tags": ["Release Notes", "Mailing List"], "url": "https://www.mail-archive.com/openvpn-users@lists.sourceforge.net/msg07534.html"}], "sourceIdentifier": "security@openvpn.net", "vulnStatus": "Analyzed", "weaknesses": [{"description": [{"lang": "en", "value": "CWE-190"}], "source": "security@openvpn.net", "type": "Secondary"}]}

{}