CVE-2019-16239

processhttpresponse in OpenConnect before 8.05 has a Buffer Overflow when a malicious server uses HTTP chunked encoding with crafted chunk sizes...

CVE-2019-16239

CVE-2019-16239 affecting OpenConnect up to version 8.05. The issue is a heap-based/buffer overflow in process_http_response when a malicious server uses HTTP chunked encoding with crafted chunk sizes, leading to potential crash/DoS. Public sources in the connected documents include multiple advis...

PT-2019-4779 · Openconnect +3 · Openconnect +3

Name of the Vulnerable Software and Affected Versions: OpenConnect versions prior to 8.05 Description: The issue is related to a buffer overflow in the process http response function when handling HTTP chunked encoding with crafted chunk sizes. This could allow a remote attacker to gain...

Fedora Update for NetworkManager-openconnect FEDORA-2016-7

The remote host is missing an update for the SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

[SECURITY] Fedora 24 Update: NetworkManager-openconnect-1.2.0-0.3.beta3.fc24

This package contains software for integrating the openconnect VPN software with NetworkManager and the GNOME desktop...

Gentoo Security Advisory GLSA 201405-18

Gentoo Linux Local Security Checks GLSA 201405-18 SPDX-FileCopyrightText: 2015 Eero Volotinen Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later ifdescription...

Fedora Update for NetworkManager-openconnect FEDORA-2015-7767

The remote host is missing an update for the SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

[SECURITY] Fedora 22 Update: NetworkManager-openconnect-1.0.2-1.fc22

This package contains software for integrating the openconnect VPN software with NetworkManager and the GNOME desktop...

The vulnerability of the Gentoo Linux operating system, which allows a malicious intruder to compromise the accessibility of protected information

The vulnerability of the openconnect package up to version 4.08 of the Gentoo Linux operating system can lead to a violation of the accessibility of protected information. This vulnerability can be exploited remotely...

OpenConnect WebConnect 6.4/6.5 jretest.html Traversal Arbitrary File Access

No description provided by source. source: http://www.securityfocus.com/bid/12613/info OpenConnect WebConnect is reported prone to multiple vulnerabilities. The following individual issues are reported: WebConnect is reported prone to a remote denial of service vulnerability. A remote attacker ma...

openSUSE Security Update : openconnect (openSUSE-SU-2013:0979-1)

This version update fixes several bugs : - Frequent connection drops fixed bnc817152. - Update to version 4.09 - Fix overflow on HTTP request buffers CVE-2012-6128bnc803347 - Fix connection to servers with round-robin DNS with two-stage auth/connect. - Impose minimum MTU of 1280 bytes. - Fix some...

openSUSE Security Update : openconnect (openSUSE-SU-2013:1072-1)

This openconnect update to version 3.20 includes several security and bug fixes. - fix bnc767616 - fix for CVE-2012-3291 - make vpnc mandatory during build, following upstream changes - package documentation in a -doc package - Update to version 3.20 - Cope with non-keepalive HTTP response on...

GLSA-201405-18 : OpenConnect: User-assisted execution of arbitrary code

The remote host is affected by the vulnerability described in GLSA-201405-18 OpenConnect: User-assisted execution of arbitrary code A stack-based buffer overflow error has been discovered in OpenConnect. Impact : A remote attacker could entice a user to connect to a malicious VPN server, possibly...

OpenConnect: User-assisted execution of arbitrary code

Background OpenConnect is a free client for Cisco AnyConnect SSL VPN software. Description A stack-based buffer overflow error has been discovered in OpenConnect. Impact A remote attacker could entice a user to connect to a malicious VPN server, possibly resulting in execution of arbitrary code...

Mandriva Linux Security Advisory : openconnect (MDVSA-2013:108)

Updated openconnect packages fix security vulnerability : A stack-based buffer overflow flaw was found in the way OpenConnect, a client for Cisco's AnyConnect VPN, performed processing of certain host names, paths, or cookie lists, received from the VPN gateway. A remote VPN gateway could provide...

Fedora Update for openconnect FEDORA-2013-2472

Check for the Version of openconnect OpenVAS Vulnerability Test Fedora Update for openconnect FEDORA-2013-2472 Authors: System Generated Check Copyright: Copyright c 2013 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it unde...

Fedora Update for openconnect FEDORA-2013-2498

The remote host is missing an update for the SPDX-FileCopyrightText: 2013 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptxrefname:"URL",...

Fedora Update for openconnect FEDORA-2013-2472

The remote host is missing an update for the SPDX-FileCopyrightText: 2013 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptxrefname:"URL",...

Fedora 17 : openconnect-4.08-1.fc17 (2013-2472)

This update fixes a potential buffer overflow in HTTP request generation, which could be triggered by a malicious server generating a large number of cookies or redirecting to a large path or hostname. Note that Tenable Network Security has extracted the preceding description block directly from...

Fedora 18 : openconnect-4.08-1.fc18 (2013-2498)

This update fixes a potential buffer overflow in HTTP request generation, which could be triggered by a malicious server generating a large number of cookies or redirecting to a large path or hostname. Note that Tenable Network Security has extracted the preceding description block directly from...