CVE-2020-12823

OpenConnect 8.09 contains a buffer overflow in get_cert_name (gnutls.c) triggered by crafted certificate data, leading to denial of service (crash) and potential further impact. Multiple connected advisories confirm the issue and note that OpenConnect 8.10 fixes it (upgrading is recommended). The...

CVE-2019-16239

CVE-2019-16239 affecting OpenConnect up to version 8.05. The issue is a heap-based/buffer overflow in process_http_response when a malicious server uses HTTP chunked encoding with crafted chunk sizes, leading to potential crash/DoS. Public sources in the connected documents include multiple advis...

CVE-2020-12105

OpenConnect (affected: 8.08 and related, e.g., OpenConnect through 8.08) is vulnerable due to mishandling negative return values from X509_check_ function calls, which could enable MITM attacks. Root cause: improper handling in X509-related checks; impact: potential eavesdropping/mitigation failu...

CVE-2013-7098

OpenConnect VPN client with GnuTLS before 5.02 is vulnerable to a heap overflow when MTU is increased on reconnection. Affected component: OpenConnect/GnuTLS stack prior to 5.02. Root cause: heap overflow due to MTU handling on reconnect. Impact is high in affected deployments per CVSS data. Reme...

CVE-2010-3902

CVE-2010-3902 affects OpenConnect; the issue is that the webvpn cookie value could be exposed in debugging output, potentially leaking sensitive information. Root cause: debugging output includes the session cookie. Evidence in connected feeds shows Fedora advisories shifting to fix this by elidi...

CVE-2012-6128

CVE-2012-6128 corresponds to a stack-based buffer overflow in OpenConnect’s http.c that can trigger a remote denial of service (application crash) by sending long values for hostname, path, or cookie list in a VPN gateway response. Affected software is OpenConnect prior to version 4.08; multiple ...

CVE-2012-3291

CVE-2012-3291: Heap-based buffer overflow in OpenConnect 3.18 allows remote servers to cause a denial of service via a crafted greeting banner. The vulnerability affects OpenConnect prior to the patched builds; Debian/SUSE advisories indicate fixes in OpenConnect packages (sid: 3.18-1; squeeze: 2...

CVE-2010-3903

CVE-2010-3903 affects OpenConnect (before 2.23). The vulnerability allows remote denial of service (application crash) of an AnyConnect SSL VPN server by triggering a 404 HTTP response. The exact root cause, vulnerable component/file, and remediation are not detailed in the provided documents; ex...

CVE-2009-5009

OpenConnect vulnerability CVE-2009-5009: a double-free in the DTLS cipher option handling during reconnect on OpenConnect before 1.40 can cause denial of service (application crash) or unspecified impact on remote AnyConnect SSL VPN servers. Affected: OpenConnect

CVE-2010-3901

OpenConnect before 2.25 is affected by CVE-2010-3901 due to improper validation of X.509 certificates, enabling MITM attacks where an attacker can spoof AnyConnect SSL VPN servers with a certificate that either does not match the server hostname or is presented when --cafile is not configured. Im...