Vendorsinfradeadopenconnect2.20
Vulnerabilities

infradead OpenConnect 2.20

Ranked by severity, then by exploit likelihood. Click a CVE ID for its full record.

3CVEs
CVE-2012-3291
Heap-based buffer overflow in OpenConnect 3.18 allows remote servers to cause a denial of service via a crafted greeting banner.
Published 2012-06-07 · Modified
7.8EPSS 0.023
CVE-2012-6128
Multiple stack-based buffer overflows in http.c in OpenConnect before 4.08 allow remote VPN gateways to cause a denial of service (application crash) via a long (1) hostname, (2) path, or (3) cookie list in a response.
Published 2013-02-24 · Modified
5.0EPSS 0.026
CVE-2010-3903
Unspecified vulnerability in OpenConnect before 2.23 allows remote AnyConnect SSL VPN servers to cause a denial of service (application crash) via a 404 HTTP status code.
Published 2010-10-12 · Modified
5.0EPSS 0.010