Google Tunnelblick vulnerabilities

7 CVEs affecting Google Tunnelblick, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2012-4677, published 2012-08-26.

More from Google.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

• CVE-2012-3485, published 2012-08-26. High severity, CVSS 7.2. EPSS: 3.8% chance of exploitation in the next 30 days. Tunnelblick 3.3beta20 and earlier relies on argv[0] to determine the name of an appropriate (1) kernel module pathname or (2) executable file pathname, which allows local users to gain privileges via…
• CVE-2012-3486, published 2012-08-26. Medium severity, CVSS 6.9. EPSS: 0.3% chance of exploitation in the next 30 days. Tunnelblick 3.3beta20 and earlier allows local users to gain privileges via an OpenVPN configuration file that specifies execution of a script upon occurrence of an OpenVPN event.
• CVE-2012-3483, published 2012-08-26. Medium severity, CVSS 6.2. EPSS: 0.3% chance of exploitation in the next 30 days. Race condition in the runScript function in Tunnelblick 3.3beta20 and earlier allows local users to gain privileges by replacing a script file.
• CVE-2012-4676, published 2012-08-26. Low severity, CVSS 1.2. EPSS: 0.2% chance of exploitation in the next 30 days. The errorExitIfAttackViaString function in Tunnelblick 3.3beta20 and earlier allows local users to delete arbitrary files by constructing a (1) symlink or (2) hard link, a different vulnerability…
• CVE-2012-3484, published 2012-08-26. High severity, CVSS 7.2. EPSS: 0.2% chance of exploitation in the next 30 days. Tunnelblick 3.3beta20 and earlier relies on a test for specific ownership and permissions to determine whether a program can be safely executed, which allows local users to bypass intended access…
• CVE-2012-4677, published 2012-08-26. Medium severity, CVSS 4.4. EPSS: 0.2% chance of exploitation in the next 30 days. Tunnelblick 3.3beta20 and earlier allows local users to gain privileges by using a crafted Info.plist file to control the gOkIfNotSecure value.
• CVE-2012-3487, published 2012-08-26. Low severity, CVSS 1.2. EPSS: 0.1% chance of exploitation in the next 30 days. Race condition in Tunnelblick 3.3beta20 and earlier allows local users to kill unintended processes by waiting for a specific PID value to be assigned to a target process.