OVPNX: 4 Zero-Days Leading to RCE, LPE and KCE (via BYOVD) Affecting Millions of OpenVPN Endpoints
Engineers explore architecture and security mechanisms for OVPNX: 4 Zero-Days Leading to RCE, LPE and KCE (via BYOVD) Affecting Millions of OpenVPN Endpoints.
Summary
OVPNX: four zero-days in OpenVPN enabling RCE, LPE, and KCE.
Related talks
nullcon·30 min
Industry experts analyze emerging threats surrounding Dangling Packages leading to RCE | Prasoon Gupta | Nullcon Webinar 2021.
rcedanglingleading+2
Black Hat USA·41 min
Fabian Thomas · Ruiyi Zhang · Lorenz Hetterich · Michael Schwarz
Presenters detail vulnerability discovery and exploitation in Arbitrary Data Manipulation and Leakage with CPU Zero-Day Bugs on RISC-V.
manipulationzero-dayarbitrary+2
Hack In The Box Security Conference·57 min
Orange Tsai · Tingyi Chang
Orange Tsai explores #HITBGSEC D1: A Pre-Auth RCE On Leading SSL VPNs.
rcepre-authhitbgsec+3