CVE-2020-12105

概要

参考情報

• lists.opensuse.org/opensuse-security-announce/2020-05/msg00039.html · Mailing List
• gitlab.com/openconnect/openconnect/-/merge_requests/96 · Third Party Advisory
• security.gentoo.org/glsa/202006-15 · Third Party Advisory

openconnect のその他の脆弱性

• CVE-2020-12823緊急 9.8OpenConnect 8.09 has a buffer overflow, causing a denial of service (application crash) or possibly unspecified other impact, via crafted ce…
• CVE-2013-7098緊急 9.8OpenConnect VPN client with GnuTLS before 5.02 contains a heap overflow if MTU is increased on reconnection.
• CVE-2019-16239緊急 9.8process_http_response in OpenConnect before 8.05 has a Buffer Overflow when a malicious server uses HTTP chunked encoding with crafted chunk…
• CVE-2012-6128中 5.0Multiple stack-based buffer overflows in http.c in OpenConnect before 4.08 allow remote VPN gateways to cause a denial of service (applicati…
• CVE-2012-3291高 7.8Heap-based buffer overflow in OpenConnect 3.18 allows remote servers to cause a denial of service via a crafted greeting banner.