Commit b38413

2025-01-21 09:31:30 Samuli Seppänen: Add CVE-2024-5594 page
/dev/null .. security-announcements/cve-2024-5594.md
@@ 0,0 1,15 @@
+ # CVE-2024-5594
+
+ ## Summary
+
+ Control channel: refuse control channel messages with nonprintable characters in them.
+
+ ## Security scope
+
+ A malicious openvpn peer can send garbage to openvpn log, or cause high CPU load.
+
+ ## References
+
+ * Release notes: ​https://www.mail-archive.com/openvpn-users@lists.sourceforge.net/msg07634.html
+ * CVE record: ​https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-5594
+ * Reported by: Reynir Björnsson
0 1 2 3 4 5 6 7 8 9 0 1 2 3 4 5 6 7 8 9 0 1 2 3 4 5 6 7 8 9 0 1 2 3 4 5 6 7 8 9