Summary
It was discovered that OpenConnect has a buffer overflow when a malicious
server uses HTTP chunked encoding with crafted chunk sizes. An attacker
could use it to provoke a denial of service (crash).
Fixed packages 1
| Release | Package | Fixed in |
|---|---|---|
| Ubuntu · 18.04 LTS 18.04:LTS | openconnect | 7.08-3ubuntu0.18.04.2 |
Vulnerabilities 1
-
Unscored —
process_http_response in OpenConnect before 8.05 has a Buffer Overflow when a malicious server uses HTTP chunked encodi…
References
-
report
https://ubuntu.com/security/CVE-2019-16239