What the vulnerability does

01Description

Buffer overflow in OpenVPN ovpn-dco-win version 1.3.0 and earlier and version 2.5.8 and earlier allows a local user process to send a too large control message buffer to the kernel driver resulting in a system crash

Key dates

02Disclosure timeline

June 20, 2025 CVE published
June 23, 2025 Record updated