Описание
OpenConnect 8.09 has a buffer overflow, causing a denial of service (application crash) or possibly unspecified other impact, via crafted certificate data to get_cert_name in gnutls.c.
Пакеты
| Пакет | Статус | Версия исправления | Релиз | Тип |
|---|---|---|---|---|
| openconnect | fixed | 8.10-1 | package |
Примечания
https://gitlab.com/openconnect/openconnect/-/merge_requests/108
Only triggerable by local certs, which are under the control of the user
EPSS
Процентиль: 83%
0.01863
Низкий
Связанные уязвимости
CVSS3: 9.8
ubuntu
больше 5 лет назад
OpenConnect 8.09 has a buffer overflow, causing a denial of service (application crash) or possibly unspecified other impact, via crafted certificate data to get_cert_name in gnutls.c.
CVSS3: 9.8
nvd
больше 5 лет назад
OpenConnect 8.09 has a buffer overflow, causing a denial of service (application crash) or possibly unspecified other impact, via crafted certificate data to get_cert_name in gnutls.c.
EPSS
Процентиль: 83%
0.01863
Низкий