CVE-2023-7224

2024-01-0813:55:20

CWE-95

OpenVPN

www.cve.org

openvpn

macos

code execution

vulnerability

dyld_insert_libraries

0.0004 Low

EPSS

Percentile

5.1%

JSON

OpenVPN Connect version 3.0 through 3.4.6 on macOS allows local users to execute code in external third party libraries using the DYLD_INSERT_LIBRARIES environment variable

CNA Affected

[
  {
    "vendor": "OpenVPN",
    "product": "OpenVPN Connect",
    "platforms": [
      "macOS"
    ],
    "versions": [
      {
        "status": "affected",
        "version": "3.0",
        "lessThanOrEqual": "3.4.6",
        "versionType": "minor release"
      }
    ],
    "defaultStatus": "unaffected"
  }
]

References

openvpn.net/vpn-server-resources/openvpn-connect-for-macos-change-log/

0.0004 Low

EPSS

Percentile

5.1%

JSON

Related for CVELIST:CVE-2023-7224