Description
Heap-based buffer overflow in OpenConnect 3.18 allows remote servers to cause a denial of service via a crafted greeting banner.
Fixed in Linux distributions
Distributions backport fixes, so the version that fixes this vulnerability differs per release — upgrade to at least the version shown. From the distributions' security trackers and advisories.
Debian
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Debian 14 | openconnect | 3.18-1 | — |
| Debian 13 | openconnect | 3.18-1 | — |
| Debian 12 | openconnect | 3.18-1 | — |
| Debian 6.0 | openconnect | 2.25-0.1+squeeze1 | DSA-2495-1 |
openSUSE
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| openSUSE Tumbleweed | openconnect | 7.07-1.3 | openSUSE-SU-2024:10553-1 |
Advisories 2
- DSA-2495-1 openconnect - buffer overflow Debian Security (DSA / DLA) · Mar 9, 2026
- openSUSE-SU-2024:10553-1 openconnect-7.07-1.3 on GA media SUSE / openSUSE Security Updates · Feb 4, 2026
References
- http://www.infradead.org/openconnect/changelog.html
- DSA-2495 vendor-advisory
- FEDORA-2012-6758 vendor-advisory
- oval:org.mitre.oval:def:17242 vdb-entry signature
- openSUSE-SU-2013:1072 vendor-advisory
- http://git.infradead.org/users/dwmw2/openconnect.git/commitdiff/14cae65318d3ef1f7d449e463b72b6934e82f1c2