CVE-2024-1305
tap-windows6 driver version 9.26 and earlier does not properly check the size data of incomming write operations which an attacker can use to overfl...
Original description
The description as published by the source.
tap-windows6 driver version 9.26 and earlier does not properly
check the size data of incomming write operations which an attacker can
use to overflow memory buffers, resulting in a bug check and potentially
arbitrary code execution in kernel space
References
- advisory github.com
- advisory nvd.nist.gov
- web community.openvpn.net
- web mail-archive.com