CVE-2024-30165

Description

Amazon AWS Client VPN before 3.9.1 on macOS has a buffer overflow that could potentially allow a local actor to execute arbitrary commands with elevated permissions, a different vulnerability than CVE-2024-30164.

References

https://aws.amazon.com/security/security-bulletins/AWS-2024-008/

https://docs.aws.amazon.com/vpn/latest/clientvpn-user/client-vpn-connect-macos.html

Details

Source: Mitre, NVD

Risk Information

CVSS v2

CVSS v3

EPSS