CVE-2021-45810

GlobalProtect-openconnect versions prior to 2.0.0 exclusive are affected by incorrect access control in GPService through DBUS, GUI. The way GlobalProtect-Openconnect is set up enables arbitrary users to start a VPN connection to arbitrary servers. By hosting an openconnect compatible server, the...

Mageia: Security Advisory (MGASA-2020-0005)

The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Mageia: Security Advisory (MGASA-2020-0251)

The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Ubuntu: Security Advisory (USN-4565-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

USN-4565-1: OpenConnect vulnerability

It was discovered that OpenConnect has a buffer overflow when a malicious server uses HTTP chunked encoding with crafted chunk sizes. An attacker could use it to provoke a denial of service crash...

USN-4565-1 openconnect vulnerability

It was discovered that OpenConnect has a buffer overflow when a malicious server uses HTTP chunked encoding with crafted chunk sizes. An attacker could use it to provoke a denial of service crash...

Ubuntu 18.04 LTS : OpenConnect vulnerability (USN-4565-1)

The remote Ubuntu 18.04 LTS host has packages installed that are affected by a vulnerability as referenced in the USN-4565-1 advisory. It was discovered that OpenConnect has a buffer overflow when a malicious server uses HTTP chunked encoding with crafted chunk sizes. An attacker could use it to...

Arbitrary Code Execution

openconnect is vulnerable to arbitrary code execution. A buffer overflow vulnerability occurs in the processhttpresponse when a malicious server uses HTTP chunked encoding with malicious chunk sizes, resulting in arbitrary code execution...

The vulnerability of the get_cert_name function (gnutls.c) in the application for connecting to virtual private networks via OpenConnect allows a perpetrator to cause a service failure or execute arbitrary code.

The vulnerability of the getcertname function gnutls.c in applications for connecting to virtual private networks via OpenConnect is related to buffer overflow vulnerabilities. Exploiting this vulnerability could allow a remote attacker to cause service failures or execute arbitrary code...

openSUSE Security Update : openconnect (openSUSE-2020-1027)

This update for openconnect fixes the following issues : - CVE-2020-12823: Fixed a buffer overflow via crafted certificate data which could have led to denial of service bsc1171862. This update was imported from the SUSE:SLE-15:Update update project. C Tenable Network Security, Inc. The descripti...

openSUSE: Security Advisory for openconnect (openSUSE-SU-2020:1027-1)

The remote host is missing an update for the Copyright C 2020 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

OPENSUSE-SU-2020:1027-1 Security update for openconnect

This update for openconnect fixes the following issues: - CVE-2020-12823: Fixed a buffer overflow via crafted certificate data which could have led to denial of service bsc1171862. This update was imported from the SUSE:SLE-15:Update update project...

CVE-2018-20319

Openconnect before 8.00 is vulnerable to passwords found in memory. Clear full buffer in buftruncate and buffree, This reduces the chances of passwords and other secrets lying around in memory when we're done. Arguably if anyone can just read memory of the VPN client while it's running, the game ...

Security update for openconnect (moderate)

openSUSE Security Update: Security update for openconnect Announcement ID: openSUSE-SU-2020:1027-1 Rating: moderate References: 1171862 Cross-References: CVE-2020-12823 Affected Products: openSUSE Leap 15.2 An update that fixes one vulnerability is now available. Description: This update for...

openSUSE Security Update : openconnect (openSUSE-2020-997)

This update for openconnect fixes the following issues : - CVE-2020-12823: Fixed a buffer overflow via crafted certificate data which could have led to denial of service bsc1171862. This update was imported from the SUSE:SLE-15:Update update project. C Tenable Network Security, Inc. The descripti...

openSUSE: Security Advisory for openconnect (openSUSE-SU-2020:0997-1)

The remote host is missing an update for the Copyright C 2020 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

OPENSUSE-SU-2020:0997-1 Security update for openconnect

This update for openconnect fixes the following issues: - CVE-2020-12823: Fixed a buffer overflow via crafted certificate data which could have led to denial of service bsc1171862. This update was imported from the SUSE:SLE-15:Update update project...

Security update for openconnect (moderate)

openSUSE Security Update: Security update for openconnect Announcement ID: openSUSE-SU-2020:0997-1 Rating: moderate References: 1171862 Cross-References: CVE-2020-12823 Affected Products: openSUSE Leap 15.1 An update that fixes one vulnerability is now available. Description: This update for...

SUSE-SU-2020:1930-1 Security update for openconnect

This update for openconnect fixes the following issues: - CVE-2020-12823: Fixed a buffer overflow via crafted certificate data which could have led to denial of service bsc1171862...

SUSE-SU-2020:1807-1 Security update for openconnect

This update for openconnect fixes the following issues: - CVE-2020-12823: Fixed a buffer overflow via crafted certificate data which could have led to denial of service bsc1171862...