CVE-2024-5198: Openvpn Ovpn-Dco-Win

Low severity, CVSS 3.3. EPSS: 0.1% chance of exploitation in the next 30 days.

OpenVPN ovpn-dco for Windows version 1.1.1 allows an unprivileged local attacker to send I/O control messages with invalid data to the driver resulting in a NULL pointer dereference leading to a system halt.

Affected products

• Openvpn Ovpn-Dco-Win: version 1.1.1 only

Published 2025-01-15. Last modified 2026-06-17.