OpenConnect Buffer Overflow Vulnerability

OpenConnect is an open source application for connecting to virtual private networks. A buffer overflow vulnerability exists in OpenConnect version 8.09. An attacker can exploit this vulnerability to cause a denial of service application crash by sending specially crafted certificate data to...

CVE-2020-12823: Buffer Copy without Checking Size of Input

OpenConnect 8.09 has a buffer overflow, causing a denial of service application crash or possibly unspecified other impact, via crafted certificate data to getcertname in gnutls.c...