CVE search · CVE-2025-50054

CVE-2025-50054

medium 5.5

Buffer overflow in OpenVPN ovpn-dco-win version 1.3.0 and earlier and version 2.5.8 and earlier allows a local user process to send a too large control message buffer to the kernel driver resulting in a system crash

Open in the NVD CVE.org JSON

Status: Analyzed
Published: 2025-06-20
Last changed: 2026-06-17
Source: security@openvpn.net
Weakness: CWE-122, CWE-787

Severity

Version	Score	Vector	Source
CVSS 3.1	medium 5.5	`CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H`	134c704f-9b21-4f2e-91b3-4a467353bcc0Secondary

Affected products

Vendor and product from the NVD’s CPE applicability statements. Versions and conditions are on the NVD’s page.

openvpn · ovpn-dco-win

References

https://community.openvpn.net/Downloads#openvpn-27_alpha2-released-19-june-2025Release Notes
https://community.openvpn.net/Security%20Announcements/CVE-2025-50054Vendor Advisory

CVE-2025-50054

Details

Severity

Affected products

References