OpenVPN ovpn-dco-win Buffer Overflow Vulnerability Allowing Local Denial-of-Service
Vulnerability
A buffer overflow vulnerability has been identified in OpenVPN's ovpn-dco-win component, specifically in version 2.8.0. This vulnerability allows local attackers to cause a system crash by sending oversized packets to the remote peer, particularly when the AEAD tag is positioned at the end of the encrypted packet.
Impact
Exploitation of this vulnerability leads to a system crash, causing a denial-of-service condition.
Added: Feb 19, 2026, 9:20 PM
Updated: Feb 19, 2026, 9:20 PM
Vulnerability Rating
Custom Algorithm
spread
0.0impact
0.8exploitability
4.6remediation
0.0relevance
3.2threat
6.4urgency
2.9incentive
0.0Our algorithm analyzes dozens of metrics to generate these 8 key vulnerability categories, which are then combined to calculate the overall risk score.