| Package | Affected versions | Patched versions |
|---|---|---|
| openconnect | = 1.00= 1.10= 1.20= 1.30= 1.40= 2.00= 2.01= 2.10= 2.11= 2.12= 2.20= 2.21= 2.22= 2.23= 2.24= 2.25= 2.26= 3.00= 3.01= 3.02= 3.11= 3.12= 3.13= 3.14= 3.15= 3.16= 3.17= 3.18= 3.19= 3.20= 3.99= 4.00= 4.01= 4.02= 4.03= 4.04= 4.05= 4.06≤ 4.07 |
Multiple stack-based buffer overflows in http.c in OpenConnect before 4.08 allow remote VPN gateways to cause a denial of service (application crash) via a long (1) hostname, (2) path, or (3) cookie list in a response.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free