CVE-2024-1305

  1. OpenCVE
  2. Vulnerabilities (CVE)
  3. CVE-2024-1305
tap-windows6 driver version 9.26 and earlier does not properly check the size data of incomming write operations which an attacker can use to overflow memory buffers, resulting in a bug check and potentially arbitrary code execution in kernel space

9.8 /10

CVSS v3 : CRITICAL

V3 Legend

Vector :

Exploitability : 3.9 / Impact : 5.9

Attack Vector NETWORK

Attack Complexity LOW

Privileges Required NONE

User Interaction NONE

Confidentiality Impact HIGH

Integrity Impact HIGH

Availability Impact HIGH

Scope UNCHANGED

References
Link Resource
https://community.openvpn.net/openvpn/wiki/CVE-2024-1305 Vendor Advisory
https://www.mail-archive.com/openvpn-users@lists.sourceforge.net/msg07534.html Release Notes Mailing List
https://community.openvpn.net/openvpn/wiki/CVE-2024-1305 Vendor Advisory
https://www.mail-archive.com/openvpn-users@lists.sourceforge.net/msg07534.html Release Notes Mailing List
Configurations

Configuration 1 (hide)

cpe:2.3:a:openvpn:tap-windows6:*:*:*:*:*:*:*:*
History

22 Aug 2025, 15:36

Type Values Removed Values Added
CPE cpe:2.3:a:openvpn:tap-windows6:*:*:*:*:*:*:*:*
First Time Openvpn tap-windows6
Openvpn
References () https://community.openvpn.net/openvpn/wiki/CVE-2024-1305 - () https://community.openvpn.net/openvpn/wiki/CVE-2024-1305 - Vendor Advisory
References () https://www.mail-archive.com/openvpn-users@lists.sourceforge.net/msg07534.html - () https://www.mail-archive.com/openvpn-users@lists.sourceforge.net/msg07534.html - Release Notes, Mailing List

21 Nov 2024, 08:50

Type Values Removed Values Added
References () https://community.openvpn.net/openvpn/wiki/CVE-2024-1305 - () https://community.openvpn.net/openvpn/wiki/CVE-2024-1305 -
References () https://www.mail-archive.com/openvpn-users@lists.sourceforge.net/msg07534.html - () https://www.mail-archive.com/openvpn-users@lists.sourceforge.net/msg07534.html -

09 Jul 2024, 16:22

Type Values Removed Values Added
CVSS v2 : unknown
v3 : unknown 		v2 : unknown
v3 : 9.8
Summary
  • (es) La versión 9.26 y anteriores del controlador tap-windows6 no verifica correctamente los datos de tamaño de las operaciones de escritura entrantes que un atacante puede usar para desbordar los búfers de memoria, lo que resulta en una verificación de errores y la ejecución de código potencialmente arbitrario en el espacio del kernel.

08 Jul 2024, 18:15

Type Values Removed Values Added
New CVE
Information

Published : 2024-07-08 18:15

Updated : 2025-08-22 15:36

NVD link : CVE-2024-1305

Mitre link : CVE-2024-1305

CVE.ORG link : CVE-2024-1305

JSON object : View

Products Affected

openvpn

  • tap-windows6
CWE
CWE-190

Integer Overflow or Wraparound