324 matches found
CVE-2020-12105
OpenConnect through 8.08 mishandles negative return values from X509check function calls, which might assist attackers in performing man-in-the-middle attacks...
Input validation
OpenConnect through 8.08 mishandles negative return values from X509check function calls, which might assist attackers in performing man-in-the-middle attacks...
CVE-2020-12105
OpenConnect through 8.08 mishandles negative return values from X509check function calls, which might assist attackers in performing man-in-the-middle attacks...
CVE-2020-12105
OpenConnect through 8.08 mishandles negative return values from X509check function calls, which might assist attackers in performing man-in-the-middle attacks...
CVE-2020-12105
OpenConnect (affected: 8.08 and related, e.g., OpenConnect through 8.08) is vulnerable due to mishandling negative return values from X509_check_ function calls, which could enable MITM attacks. Root cause: improper handling in X509-related checks; impact: potential eavesdropping/mitigation failu...
CVE-2020-12105
OpenConnect through 8.08 mishandles negative return values from X509check function calls, which might assist attackers in performing man-in-the-middle attacks...
CVE-2020-12105
OpenConnect through 8.08 mishandles negative return values from X509check function calls, which might assist attackers in performing man-in-the-middle attacks...
PT-2020-6927 · Unknown +4 · Openconnect +4
Name of the Vulnerable Software and Affected Versions: OpenConnect versions prior to 8.08 Description: The issue is related to the mishandling of negative return values from X509 check function calls, which could assist attackers in performing man-in-the-middle attacks. This vulnerability is...
CVE-2020-12105: Improper Handling of Exceptional Conditions
OpenConnect through 8.08 mishandles negative return values from X509check function calls, which might assist attackers in performing man-in-the-middle attacks...
The vulnerability of the process_http_response function in applications for connecting to OpenConnect virtual private networks allows a perpetrator to gain unauthorized access to information and compromise its integrity and availability.
The vulnerability of the processhttpresponse function in applications for connecting to OpenConnect virtual private networks is related to buffer overflow vulnerabilities. Exploiting this vulnerability can allow an attacker operating remotely to gain unauthorized access to information and...
CVE-2013-7098
OpenConnect VPN client with GnuTLS before 5.02 contains a heap overflow if MTU is increased on reconnection...
DEBIAN-CVE-2013-7098
OpenConnect VPN client with GnuTLS before 5.02 contains a heap overflow if MTU is increased on reconnection...
CVE-2013-7098
OpenConnect VPN client with GnuTLS before 5.02 contains a heap overflow if MTU is increased on reconnection...
Heap overflow
OpenConnect VPN client with GnuTLS before 5.02 contains a heap overflow if MTU is increased on reconnection...
CVE-2013-7098
OpenConnect VPN client with GnuTLS before 5.02 contains a heap overflow if MTU is increased on reconnection...
CVE-2013-7098
OpenConnect VPN client with GnuTLS before 5.02 contains a heap overflow if MTU is increased on reconnection...
CVE-2013-7098
OpenConnect VPN client with GnuTLS before 5.02 is vulnerable to a heap overflow when MTU is increased on reconnection. Affected component: OpenConnect/GnuTLS stack prior to 5.02. Root cause: heap overflow due to MTU handling on reconnect. Impact is high in affected deployments per CVSS data. Reme...
CVE-2013-7098
OpenConnect VPN client with GnuTLS before 5.02 contains a heap overflow if MTU is increased on reconnection...