CVE-2026-11604

MEDIUM EPSS 4.4%

Published Jun 10, 20262w ago · Modified Jun 17, 20262w ago

5.6 CVSS 4.0

Medium

Published Jun 10, 2026 2w ago

Last Modified Jun 17, 2026 2w ago

Description

An incorrect buffer size calculation in the epoch key generator in OpenVPN ovpn-dco-win version 2.0.0 through 2.8.3 allows a remote authenticated peer to trigger a heap-based buffer overflow and kernel memory corruption via a crafted data packet, resulting in a system crash (denial of service).

CVSS Details

Base Score

5.6

Exploitability

—

Impact

—

Vector string

CVSS:4.0/AV:L/AC:H/AT:P/PR:L/UI:P/VC:N/VI:N/VA:H/SC:N/SI:N/SA:H/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

Attack Vector Local

Attack Complexity High

Privileges Required Low

User Interaction P

Scope X

Threat Intelligence

EPSS Exploit Probability

4.4% percentile

Exploit & Patch Status

No Known Exploit

No Patch Available

Weaknesses 3

CWE-122

CWE-131

CWE-787 Out-of-bounds Write Memory Safety

References 2

community.openvpn.net https://community.openvpn.net/Security%20Announcements/CVE-2026-11604
github.com https://github.com/OpenVPN/ovpn-dco-win/releases

Remediation

No remediation data recorded yet

Check vendor advisories and the NVD entry for patch availability.