Security context

Highlights

Denial of Service: 81 prior fixes. Scrutinize any change in this area.

src/openvpnserv/interactive.c: most-fixed (24 issues). Treat as high-risk during review.

73 high-severity fixes in this history; regressions here are high-impact.

Recurring patterns

Privilege Escalation: The interactive helper service on Windows runs with SYSTEM privileges. Attackers can exploit insecure named pipes, poor ACL validation, or directory traversal to manipulate service execution, leading to local privilege escalation. Strict Security Descriptors (SDDL) and path canonicalization are required to secure this interface.

Auth Bypass: Vulnerabilities in the TLS state machine, dynamic renegotiations, and deferred authentication handlers have historically permitted authentication bypasses or let clients stay connected with expired/incorrect credentials across session renegotiations.

Denial of Service: Untrusted control channel inputs or structural handshake malformations frequently trigger fatal internal ASSERT statements or NULL pointer dereferences. Shifting from fatal assertions to safe, state-discarding conditional checks is a critical ongoing pattern for server robustness.