Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

redhat логотип

CVE-2026-82312

Опубликовано: 07 сент. 2026
Источник: redhat
CVSS3: 5.5
EPSS Низкий

Описание

OpenVPN 2.0.0 through 2.6.22 and 2.7_alpha1 through 2.7.6 on Windows allows local authenticated users to cause a denial of service via a NULL DACL on named IPC objects

A flaw was found in OpenVPN on Windows. A local authenticated user could exploit a vulnerability related to a NULL Discretionary Access Control List (DACL) on named Inter-Process Communication (IPC) objects. This could allow the user to cause a denial of service, making the service unavailable to legitimate users.

Отчет

Moderate: This denial of service vulnerability affects OpenVPN on Windows platforms. As Red Hat products are primarily Linux-based, this flaw does not directly impact Red Hat Enterprise Linux or other Red Hat supported offerings.

Дополнительная информация

Статус:

Moderate
Дефект:
CWE-279
https://bugzilla.redhat.com/show_bug.cgi?id=2529300openvpn: OpenVPN: Denial of service via NULL DACL on named IPC objects

EPSS

Процентиль: 1%
0.00101
Низкий

5.5 Medium

CVSS3

Связанные уязвимости

ubuntu
13 дней назад

OpenVPN 2.0.0 through 2.6.22 and 2.7_alpha1 through 2.7.6 on Windows allows local authenticated users to cause a denial of service via a NULL DACL on named IPC objects

nvd
9 дней назад

OpenVPN 2.0.0 through 2.6.22 and 2.7_alpha1 through 2.7.6 on Windows allows local authenticated users to cause a denial of service via a NULL DACL on named IPC objects

debian
9 дней назад

OpenVPN 2.0.0 through 2.6.22 and 2.7_alpha1 through 2.7.6 on Windows a ...

github
9 дней назад

OpenVPN 2.0.0 through 2.6.22 and 2.7_alpha1 through 2.7.6 on Windows allows local authenticated users to cause a denial of service via a NULL DACL on named IPC objects

EPSS

Процентиль: 1%
0.00101
Низкий

5.5 Medium

CVSS3