Buffer overflow in Openvpn Ovpn-dco-win
CVE-2026-11604
An incorrect buffer size calculation in the epoch key generator in OpenVPN ovpn-dco-win version 2.0.0 through 2.8.3 allows a remote authenticated peer to trigger a heap-based buffer overflow and kernel memory corruption via a crafted data…
Vulnerability class: Buffer Overflow
EPSS: 0.001 (4.5th percentile) — read the EPSS interpretation.
Affected products
- Openvpn Ovpn-dco-win — versions 2.0.0
Weakness classification (CWE)
References
- security@openvpn.net (vendor-advisory)
- security@openvpn.net (product)