Astra Linux - уязвимость в openconnect

OpenConnect 8.09 has a buffer overflow issue, which can lead to a denial of service application crash or potentially cause unspecified other problems, due to the use of crafted certificate data in the getcertname function within gnutls.c...

Astra Linux - уязвимость в openconnect

OpenConnect through version 8.08 mishandles negative return values from X509check function calls, which may assist attackers in performing man-in-the-middle attacks...

CVE-2022-31524

The PureStorage-OpenConnect/swagger repository through 1.1.5 on GitHub allows absolute path traversal because the Flask sendfile function is used unsafely...

CVE-2019-16239

processhttpresponse in OpenConnect before 8.05 has a Buffer Overflow when a malicious server uses HTTP chunked encoding with crafted chunk sizes...

EUVD-2013-6884

Malware in sbrugna...

EUVD-2020-4421

Malware in sbrugna...

EUVD-2010-3880

Malware in sbrugna...

EUVD-2019-7046

Malware in sbrugna...

EUVD-2020-5106

Malware in sbrugna...

EUVD-2009-4971

Malware in sbrugna...

EUVD-2012-5995

Malware in sbrugna...

EUVD-2012-3269

Malware in sbrugna...

EUVD-2010-3881

Malware in sbrugna...

EUVD-2010-3879

Malware in sbrugna...

EUVD-2022-52980

Malicious code in bioql PyPI...

EUVD-2021-32527

Malicious code in bioql PyPI...

Linux Distros Unpatched Vulnerability : CVE-2020-12823

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - OpenConnect 8.09 has a buffer overflow, causing a denial of service application crash or possibly unspecified other impact, via crafted certificate data to...

Linux Distros Unpatched Vulnerability : CVE-2020-12105

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - OpenConnect through 8.08 mishandles negative return values from X509check function calls, which might assist attackers in performing man-in-the-middle attacks...

CVE-2021-45809

GlobalProtect-openconnect versions prior to 1.4.3 are affected by incorrect access control in GPService through DBUS, GUI Application. The way GlobalProtect-Openconnect is set up enables arbitrary users to execute commands as root by submitting the --script=...

CVE-2010-3903

Unspecified vulnerability in OpenConnect before 2.23 allows remote AnyConnect SSL VPN servers to cause a denial of service application crash via a 404 HTTP status code...