Description
Multiple stack-based buffer overflows in http.c in OpenConnect before 4.08 allow remote VPN gateways to cause a denial of service (application crash) via a long (1) hostname, (2) path, or (3) cookie list in a response.
Fixed in Linux distributions
Distributions backport fixes, so the version that fixes this vulnerability differs per release — upgrade to at least the version shown. From the distributions' security trackers and advisories.
Debian
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Debian 14 | openconnect | 3.20-3 | — |
| Debian 13 | openconnect | 3.20-3 | — |
| Debian 12 | openconnect | 3.20-3 | — |
| Debian 6.0 | openconnect | 2.25-0.1+squeeze2 | DSA-2623-1 |
openSUSE
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| openSUSE Tumbleweed | openconnect | 7.07-1.3 | openSUSE-SU-2024:10553-1 |
Advisories 2
- DSA-2623-1 openconnect - buffer overflow Debian Security (DSA / DLA) · Mar 9, 2026
- openSUSE-SU-2024:10553-1 openconnect-7.07-1.3 on GA media SUSE / openSUSE Security Updates · Feb 4, 2026
References
- MDVSA-2013:108 vendor-advisory
- http://www.infradead.org/openconnect/changelog.html
- [oss-security] 20130212 Re: CVE request: openconnect buffer overflow mailing-list
- DSA-2623 vendor-advisory
- openconnect-vpngateway-bo(82058) vdb-entry
- 57884 vdb-entry
- openSUSE-SU-2013:0979 vendor-advisory
- http://git.infradead.org/users/dwmw2/openconnect.git/commitdiff/26f752c3dbf69227679fc6bebb4ae071aecec491
- https://wiki.mageia.org/en/Support/Advisories/MGASA-2013-0060