medium6.9
CVE-2026-105390
Improper synchronization in the OpenVPN ovpn-dco-win for Windows versions 0.6.5 through 1.3.5 and 2.4.0 through 2.8.7 allows local attackers to trigger a deadl…
Impact
Improper synchronization in the OpenVPN ovpn-dco-win for Windows versions 0.6.5 through 1.3.5 and 2.4.0 through 2.8.7 allows local attackers to trigger a deadlock via a crafted write to the ovpn-dco device, causing the host to become unresponsive.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| OpenVPN | OpenVPN Ovpn-Dco-Win For Windows Versions 0.6.5 | through 1.3.5 |
| 2.4.0 | through 2.8.7 |
Versions were read from the advisory text. No structured product data has been published for this record yet.