CWE Code: 415
Vulnerability Type: privilege_escalation
CVSS Score: 4.6
CWE Name:  Double Free
Summary: openvpnserv.exe (aka the interactive service helper) in openvpn 2.4.x before 2.4.6 allows a local attacker to cause a double-free of memory by sending a malformed request to the interactive service. this could cause a denial-of-service through memory corruption or possibly have unspecified other impact including privilege escalation.
Access Authentication: NONE
Access Complexity: LOW
Access Vector: LOCAL
Impact (C/I/A): PARTIAL/PARTIAL/PARTIAL
Published Date: 2018-05-01
Last Modified Date: 2018-06-13