CVE-2012-3291

HIGH 7.8CVE-2012-3291 · Published 07/06/2012 · updated 16/06/2026

In short

CVE-2012-3291 is a HIGH (CVSS 7.8) vulnerability affecting openconnect (infradead).
Chance of exploitation in the next 30 days (EPSS): 2.3%, higher than 83.3% of all vulnerabilities.
No patched version is listed yet: follow the vendor's advisory in References.

Package	Affected versions	Patched versions
openconnect infradead	`= 1.00= 1.10= 1.20= 1.30= 1.40= 2.00= 2.01= 2.10= 2.11= 2.12= 2.20= 2.21= 2.22= 2.23= 2.24= 2.25= 2.26= 3.00= 3.01= 3.02= 3.11= 3.12= 3.13= 3.14= 3.15= 3.16≤ 3.17`	No fix yet

Description

Heap-based buffer overflow in OpenConnect 3.18 allows remote servers to cause a denial of service via a crafted greeting banner.

References

More vulnerabilities in openconnect

See all →

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free

Package

Affected versions

Patched versions

openconnect

infradead

= 1.00= 1.10= 1.20= 1.30= 1.40= 2.00= 2.01= 2.10= 2.11= 2.12= 2.20= 2.21= 2.22= 2.23= 2.24= 2.25= 2.26= 3.00= 3.01= 3.02= 3.11= 3.12= 3.13= 3.14= 3.15= 3.16≤ 3.17

No fix yet

More vulnerabilities in openconnect

See all →