Lucene search

[email protected]CVE-2023-7224

HistoryJan 08, 2024 - 2:15 p.m.

CVE-2023-7224

2024-01-0814:15:47

CWE-94

CWE-95

[email protected]

web.nvd.nist.gov

228

openvpn

connect

macos

code execution

dyld_insert_libraries

cve-2023-7224

nvd

7.8 High

CVSS3

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

7.4 High

AI Score

Confidence

High

0.0004 Low

EPSS

Percentile

5.1%

JSON

OpenVPN Connect version 3.0 through 3.4.6 on macOS allows local users to execute code in external third party libraries using the DYLD_INSERT_LIBRARIES environment variable

Affected configurations

NVD

Node

openvpnconnectRange3.0.0–3.4.6macos

CPENameOperatorVersion
openvpn:connectopenvpn connectle3.4.6

CPE	Name	Operator	Version
openvpn:connect	openvpn connect	le	3.4.6

CNA Affected

[
  {
    "vendor": "OpenVPN",
    "product": "OpenVPN Connect",
    "platforms": [
      "macOS"
    ],
    "versions": [
      {
        "status": "affected",
        "version": "3.0",
        "lessThanOrEqual": "3.4.6",
        "versionType": "minor release"
      }
    ],
    "defaultStatus": "unaffected"
  }
]

References

openvpn.net/vpn-server-resources/openvpn-connect-for-macos-change-log/

7.8 High

CVSS3

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

7.4 High

AI Score

Confidence

High

0.0004 Low

EPSS

Percentile

5.1%

JSON

Related for CVE-2023-7224

prion1 cvelist1 nvd1