CVE-2010-3903

概要

参考情報

• infradead.org/openconnect.html

openconnect のその他の脆弱性

• CVE-2020-12823緊急 9.8OpenConnect 8.09 has a buffer overflow, causing a denial of service (application crash) or possibly unspecified other impact, via crafted ce…
• CVE-2020-12105中 5.9OpenConnect through 8.08 mishandles negative return values from X509_check_ function calls, which might assist attackers in performing man-i…
• CVE-2013-7098緊急 9.8OpenConnect VPN client with GnuTLS before 5.02 contains a heap overflow if MTU is increased on reconnection.
• CVE-2019-16239緊急 9.8process_http_response in OpenConnect before 8.05 has a Buffer Overflow when a malicious server uses HTTP chunked encoding with crafted chunk…
• CVE-2012-6128中 5.0Multiple stack-based buffer overflows in http.c in OpenConnect before 4.08 allow remote VPN gateways to cause a denial of service (applicati…