Arbitrary Code Execution

openconnect is vulnerable to arbitrary code execution. A buffer overflow vulnerability occurs in the processhttpresponse when a malicious server uses HTTP chunked encoding with malicious chunk sizes, resulting in arbitrary code execution...

CVE-2019-16239

processhttpresponse in OpenConnect before 8.05 has a Buffer Overflow when a malicious server uses HTTP chunked encoding with crafted chunk sizes...

CVE-2019-16239: Buffer Copy without Checking Size of Input

processhttpresponse in OpenConnect before 8.05 has a Buffer Overflow when a malicious server uses HTTP chunked encoding with crafted chunk sizes...