CVE-2019-16239

概要

参考情報

• lists.infradead.org/pipermail/openconnect-devel/2019-September/005412.html · Broken Link
• lists.opensuse.org/opensuse-security-announce/2019-10/msg00060.html · Mailing List
• lists.opensuse.org/opensuse-security-announce/2019-10/msg00061.html · Mailing List
• lists.debian.org/debian-lts-announce/2019/10/msg00003.html · Mailing List
• lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/FX56KYWC7X4ETV4P6HGJC7GZUEBITBBS
• lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/HDMZGNBLZZKAGBI2PNXYWWKLD2LXKFH6
• lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/WI7ZENFAWCHF2RU4NHPL2CU4WGZ4BNDJ
• seclists.org/bugtraq/2020/Jan/31 · Mailing List
• t2.fi/schedule/2019 · Not Applicable
• usn.ubuntu.com/4565-1 · Third Party Advisory
• debian.org/security/2020/dsa-4607 · Third Party Advisory

openconnect のその他の脆弱性

• CVE-2020-12823緊急 9.8OpenConnect 8.09 has a buffer overflow, causing a denial of service (application crash) or possibly unspecified other impact, via crafted ce…
• CVE-2020-12105中 5.9OpenConnect through 8.08 mishandles negative return values from X509_check_ function calls, which might assist attackers in performing man-i…
• CVE-2013-7098緊急 9.8OpenConnect VPN client with GnuTLS before 5.02 contains a heap overflow if MTU is increased on reconnection.
• CVE-2012-6128中 5.0Multiple stack-based buffer overflows in http.c in OpenConnect before 4.08 allow remote VPN gateways to cause a denial of service (applicati…
• CVE-2012-3291高 7.8Heap-based buffer overflow in OpenConnect 3.18 allows remote servers to cause a denial of service via a crafted greeting banner.