Wind River Support Network

HomeDefectsLIN1024-137
Fixed

LIN1024-137 : Security Advisory - openvpn - CVE-2024-24974

Created: Apr 29, 2024    Updated: Aug 28, 2024
Resolved Date: Jun 25, 2024
Found In Version: 10.24.33.1
Fix Version: 10.24.33.1
Severity: Standard
Applicable for: Wind River Linux LTS 24
Component/s: Userspace

Description

The interactive service in OpenVPN 2.6.9 and earlier allows the OpenVPN service pipe to be accessed remotely, which allows a remote attacker to interact with the privileged OpenVPN interactive service.

https://nvd.nist.gov/vuln/detail/CVE-2024-24974

CVEs


Live chat
Online