Lucene search
HistoryJan 08, 2024 - 2:15 p.m.
CVE-2023-7224
openvpn connect
macos
code execution
vulnerability
dyld_insert_libraries
third party libraries
7.8 High
CVSS3
Attack Vector
LOCAL
Attack Complexity
LOW
Privileges Required
LOW
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
0.0004 Low
EPSS
Percentile
5.1%
OpenVPN Connect version 3.0 through 3.4.6 on macOS allows local users to execute code in external third party libraries using the DYLD_INSERT_LIBRARIES environment variable
Affected configurations
Node
openvpnconnectRange3.0.0–3.4.6macos
Related
prion
prion
Code injection
2024-01-08 14:15:00
cve
cve
CVE-2023-7224
2024-01-08 14:15:47
cvelist
cvelist
CVE-2023-7224
2024-01-08 13:55:20
7.8 High
CVSS3
Attack Vector
LOCAL
Attack Complexity
LOW
Privileges Required
LOW
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
0.0004 Low
EPSS
Percentile
5.1%
Related for NVD:CVE-2023-7224