CVE-2024-30165: Buffer Overflow

Q: What is the severity of CVE-2024-30165?

CVE-2024-30165 is classified as a critical vulnerability due to its potential to allow local actors to execute arbitrary commands with elevated permissions.

Q: How do I fix CVE-2024-30165?

To address CVE-2024-30165, upgrade your Amazon AWS Client VPN to version 3.9.1 or later.

Q: Who is affected by CVE-2024-30165?

CVE-2024-30165 affects users running Amazon AWS Client VPN versions before 3.9.1 on macOS.

Q: What type of vulnerability is CVE-2024-30165?

CVE-2024-30165 is a buffer overflow vulnerability that could lead to arbitrary command execution.

Q: Can CVE-2024-30165 be exploited remotely?

CVE-2024-30165 requires local access, meaning only locally authenticated users can exploit this vulnerability.

Published May 28, 2024

Updated

Amazon AWS Client VPN before 3.9.1 on macOS has a buffer overflow that could potentially allow a local actor to execute arbitrary commands with elevated permissions, a different vulnerability than CVE-2024-30164.

Affected Software

1 affected component

Amazon Aws Client Vpn<3.9.1

Event History

Jan 1, 1970

CVE Published

via MITRE·12:00 AM

May 28, 2024

CVE Published

via NVD·05:15 PM

Data Sourced

via NVD·05:15 PM

DescriptionSeverityWeakness

Aug 2, 2024

Data Sourced

via MITRE·01:34 AM

Description

Frequently Asked Questions

What is the severity of CVE-2024-30165?

CVE-2024-30165 is classified as a critical vulnerability due to its potential to allow local actors to execute arbitrary commands with elevated permissions.

How do I fix CVE-2024-30165?

To address CVE-2024-30165, upgrade your Amazon AWS Client VPN to version 3.9.1 or later.

Who is affected by CVE-2024-30165?

CVE-2024-30165 affects users running Amazon AWS Client VPN versions before 3.9.1 on macOS.

What type of vulnerability is CVE-2024-30165?

CVE-2024-30165 is a buffer overflow vulnerability that could lead to arbitrary command execution.

Can CVE-2024-30165 be exploited remotely?