Code injection

2024-01-0814:15:00

PRIOn knowledge base

www.prio-n.com

openvpn

code injection

macos

dyld_insert_libraries

vulnerability

7.2 High

AI Score

Confidence

High

0.0004 Low

EPSS

Percentile

5.1%

JSON

OpenVPN Connect version 3.0 through 3.4.6 on macOS allows local users to execute code in external third party libraries using the DYLD_INSERT_LIBRARIES environment variable

CPENameOperatorVersion
connectge3.0.0
connectle3.4.6

CPE	Name	Operator	Version
	connect	ge	3.0.0
	connect	le	3.4.6

References

openvpn.net/vpn-server-resources/openvpn-connect-for-macos-change-log/