Database/Control plane, storage & DevOps
OpenVPN (tap-windows6): Unchecked write size
CVSS 9.8CVE-2024-1305Control plane, storage & DevOpscurated
Impact
Unchecked write size -> memory buffer overflow and potential arbitrary code execution in kernel space
Who can reach it
Network (remote)
What to do
Control-plane: operator endpoint driver update
References
Related entries
- Fortinet FortiOS: SSL-VPN out-of-bounds writeCVE-2024-21762 · Fortinet FortiOSCritical
- NetApp ONTAP Select Deploy administration utility (hard-coded credentials): Baked-in credentials let an attacker readCVE-2024-21990 · NetApp ONTAP Select Deploy administration utility (hard-coded credentials)Critical
- HPE Cray Parallel Application Launch Service (PALS) authentication bypass: Authentication bypass in the serviceCVE-2024-22441 · HPE Cray Parallel Application Launch Service (PALS) authentication bypassCritical
- Jenkins: CLI parser expands `@file` into argument contentsCVE-2024-23897 · JenkinsCritical
- LenelS2 NetBox access control and event monitoring system (<=5.6.1): Unauthenticated remote code executionCVE-2024-2421 · LenelS2 NetBox access control and event monitoring system (<=5.6.1)Critical
- JetBrains TeamCity: Alternative-path authentication bypassCVE-2024-27198 · JetBrains TeamCityCritical
This entry is curated: imported from vendor advisories with machine assistance, not yet individually verified. Confirm against your vendor's advisory before acting, and report anything wrong.