Buffer Overflow Vulnerability Affects AWS Client VPN on Windows, macOS, and Linux

CVE-2024-30164

What is CVE-2024-30164?

Amazon AWS Client VPN is affected by a buffer overflow vulnerability that presents a risk for local threat actors to execute arbitrary commands with elevated permissions. This vulnerability can compromise system integrity and user trust, making it essential for users to update their software to the latest available versions. Affected users should take immediate action to apply the fixes provided in versions 3.11.1 for Windows, 3.9.1 for macOS, and 3.12.1 for Linux to secure their systems against exploitation.

References