CVE-2020-12823

概要

参考情報

• lists.opensuse.org/opensuse-security-announce/2020-07/msg00039.html · Mailing List
• lists.opensuse.org/opensuse-security-announce/2020-07/msg00056.html · Mailing List
• bugs.gentoo.org/721570 · Exploit
• gitlab.com/openconnect/openconnect/-/merge_requests/108 · Patch
• lists.debian.org/debian-lts-announce/2020/05/msg00015.html · Mailing List
• lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/25MFX4AZE7RDCUWOL4ZOE73YBOPUMQDX
• lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/AYSXLXAPXD2T73T6JMHI5G2WP7KHAGMN
• lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/BEVTIH5UFX35CC7MVSYBGRM3D66ACFD5
• security.gentoo.org/glsa/202006-15 · Third Party Advisory

openconnect のその他の脆弱性

• CVE-2020-12105中 5.9OpenConnect through 8.08 mishandles negative return values from X509_check_ function calls, which might assist attackers in performing man-i…
• CVE-2013-7098緊急 9.8OpenConnect VPN client with GnuTLS before 5.02 contains a heap overflow if MTU is increased on reconnection.
• CVE-2019-16239緊急 9.8process_http_response in OpenConnect before 8.05 has a Buffer Overflow when a malicious server uses HTTP chunked encoding with crafted chunk…
• CVE-2012-6128中 5.0Multiple stack-based buffer overflows in http.c in OpenConnect before 4.08 allow remote VPN gateways to cause a denial of service (applicati…
• CVE-2012-3291高 7.8Heap-based buffer overflow in OpenConnect 3.18 allows remote servers to cause a denial of service via a crafted greeting banner.