CVE-2012-6128
24.02.2013, 19:55
Multiple stack-based buffer overflows in http.c in OpenConnect before 4.08 allow remote VPN gateways to cause a denial of service (application crash) via a long (1) hostname, (2) path, or (3) cookie list in a response.Enginsight
| Vendor | Product | Version |
|---|---|---|
| infradead | openconnect | 𝑥 ≤ 4.07 |
| infradead | openconnect | 1.00 |
| infradead | openconnect | 1.10 |
| infradead | openconnect | 1.20 |
| infradead | openconnect | 1.30 |
| infradead | openconnect | 1.40 |
| infradead | openconnect | 2.00 |
| infradead | openconnect | 2.01 |
| infradead | openconnect | 2.10 |
| infradead | openconnect | 2.11 |
| infradead | openconnect | 2.12 |
| infradead | openconnect | 2.20 |
| infradead | openconnect | 2.21 |
| infradead | openconnect | 2.22 |
| infradead | openconnect | 2.23 |
| infradead | openconnect | 2.24 |
| infradead | openconnect | 2.25 |
| infradead | openconnect | 2.26 |
| infradead | openconnect | 3.00 |
| infradead | openconnect | 3.01 |
| infradead | openconnect | 3.02 |
| infradead | openconnect | 3.11 |
| infradead | openconnect | 3.12 |
| infradead | openconnect | 3.13 |
| infradead | openconnect | 3.14 |
| infradead | openconnect | 3.15 |
| infradead | openconnect | 3.16 |
| infradead | openconnect | 3.17 |
| infradead | openconnect | 3.18 |
| infradead | openconnect | 3.19 |
| infradead | openconnect | 3.20 |
| infradead | openconnect | 3.99 |
| infradead | openconnect | 4.00 |
| infradead | openconnect | 4.01 |
| infradead | openconnect | 4.02 |
| infradead | openconnect | 4.03 |
| infradead | openconnect | 4.04 |
| infradead | openconnect | 4.05 |
| infradead | openconnect | 4.06 |
𝑥
= Vulnerable software versions
Debian Releases
Ubuntu Releases
Common Weakness Enumeration
References