Wind River Support Network

HomeDefectsLIN9-9900
Fixed

LIN9-9900 : Security Advisory - openconnect - CVE-2020-12823

Created: May 13, 2020    Updated: Jun 3, 2020
Resolved Date: Jun 3, 2020
Found In Version: 9.0.0.1
Fix Version: 9.0.0.25
Severity: Standard
Applicable for: Wind River Linux 9
Component/s: Userspace

Description

OpenConnect 8.09 has a buffer overflow, causing a denial of service (application crash) or possibly unspecified other impact, via crafted certificate data to get_cert_name in gnutls.c.

CREATE(Triage):(User=admin) [CVE-2020-12823|https://nvd.nist.gov/vuln/detail/CVE-2020-12823]

CVEs

  • Linkedin
  • Facebook
  • Twitter
  • Youtube