CVE-2024-5198

LowCVSS 3.3/10Last modified Jun 17, 2026

Description

OpenVPN ovpn-dco for Windows version 1.1.1 allows an unprivileged local attacker to send I/O control messages with invalid data to the driver resulting in a NULL pointer dereference leading to a system halt.

Metrics

CVSS 3.1 3.3/10CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L

Weakness enumeration

CWE-476

Affected software

No affected versions have been published.

Timeline

Published: Jan 15, 2025
Last modified: Jun 17, 2026
NVD status: Analyzed

Related CVEs from 2024

CVE-2024-519805.3An unauthenticated attacker may perform a limited server side request forgery (SSRF), forcing the target device to open a TCP connection to CVE-2024-519815.3An unauthenticated attacker may perform a blind server side request forgery (SSRF), due to a CLRF injection issue that can be leveraged to p CVE-2024-519827.5An unauthenticated attacker who can connect to TCP port 9100 can issue a Printer Job Language (PJL) command that will crash the target devic CVE-2024-519837.5An unauthenticated attacker who can connect to the Web Services feature (HTTP TCP port 80) can issue a WS-Scan SOAP request containing an un CVE-2024-519846.8An authenticated attacker can reconfigure the target device to use an external service (such as LDAP or FTP) controlled by the attacker. If CVE-2024-519875.4Duende.AccessTokenManagement.OpenIdConnect is a set of .NET libraries that manage OAuth and OpenId Connect access tokens. HTTP Clients creat CVE-2024-519886.5RabbitMQ is a feature rich, multi-protocol messaging and streaming broker. In affected versions queue deletion via the HTTP API was not veri CVE-2024-519897.1Password Pusher is an open source application to communicate sensitive information over the web. A cross-site scripting (XSS) vulnerability CVE-2024-51995.4The Spotify Play Button WordPress plugin through 1.0 does not validate and escape some of its shortcode attributes before outputting them ba CVE-2024-519909.3jj, or Jujutsu, is a Git-compatible VCS written in rust. In affected versions specially crafted Git repositories can cause `jj` to write fil CVE-2024-519914.9October is a Content Management System (CMS) and web platform. A vulnerability in versions prior to 3.7.5 affects authenticated administrato CVE-2024-519924.1Orchid is a @laravel package that allows for rapid application development of back-office applications, admin/user panels, and dashboards. T