Debian/openconnect: critical 9.8
OpenConnect 8.09 has a buffer overflow, causing a denial of service (application crash) or possibly unspecified other impact, via crafted certificate data to get_cert_name in gnutls.c.
Action: Upgrade openconnect to 8.10-1 or later.
Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 8.10-1 | - |
Fixed versions
| 8.10-1 |
Sources
- osv: DEBIAN-CVE-2020-12823#Debian:14/openconnect
- https://security-tracker.debian.org/tracker/CVE-2020-12823
published · modified · JSON