CVE-2026-105390
CVE-2026-105390
This page contains facts from public vulnerability sources. Check the original advisory before updating.
Improper synchronization in the OpenVPN ovpn-dco-win for Windows versions 0.6.5 through 1.3.5 and 2.4.0 through 2.8.7 allows local attackers to trigger a deadlock via a crafted write to the ovpn-dco device, causing the host to become unresponsive.
CVSS 6.9 · Medium · EPSS 0.1%
- Published
- Updated
Affected products and versions
ovpn-dco-win
- Versions
- ≥ 0.6.5, ≤ 1.3.5: Affected (semver)
- ≥ 2.4.0, ≤ 2.8.7: Affected (semver)
No fix published