Description
OpenConnect 8.09 has a buffer overflow, causing a denial of service (application crash) or possibly unspecified other impact, via crafted certificate data to get_cert_name in gnutls.c.
Fixed in Linux distributions
Distributions backport fixes, so the version that fixes this vulnerability differs per release — upgrade to at least the version shown. From the distributions' security trackers and advisories.
Debian
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Debian 14 | openconnect | 8.10-1 | — |
| Debian 13 | openconnect | 8.10-1 | — |
| Debian 12 | openconnect | 8.10-1 | — |
| Debian 8 | openconnect | 6.00-2+deb8u2 | DLA-2212-1 |
Ubuntu
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Ubuntu Pro 20.04 LTS | openconnect | 8.05-1ubuntu0.1~esm1 | USN-9081-1 |
| Ubuntu Pro 18.04 LTS | openconnect | 7.08-3ubuntu0.18.04.2+esm1 | USN-9081-1 |
| Ubuntu Pro 16.04 LTS | openconnect | 7.06-2ubuntu0.1~esm1 | USN-9081-1 |
SUSE
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| SLES 15 SP5 | oath-toolkit | 2.6.2-150000.3.5.1 | SUSE-SU-2024:0317-1 |
| SLES 15 SP5 | openconnect | 9.12-150400.15.3.1 | SUSE-SU-2024:0317-1 |
| SLES 15 SP5 | stoken | 0.81-150400.13.2.1 | SUSE-SU-2024:0317-1 |
| SLES 15 SP2 | openconnect | 7.08-6.9.1 | SUSE-SU-2020:1930-1 |
| SLES 15 SP1 | openconnect | 7.08-6.9.1 | SUSE-SU-2020:1930-1 |
| SLES 12 SP5 | openconnect | 7.08-3.12.1 | SUSE-SU-2020:1807-1 |
| SLES 12 SP4 | openconnect | 7.08-3.12.1 | SUSE-SU-2020:1807-1 |
openSUSE
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| openSUSE Tumbleweed | openconnect | 8.10-2.6 | openSUSE-SU-2024:11114-1 |
| openSUSE Leap 15.5 | oath-toolkit | 2.6.2-150000.3.5.1 | SUSE-SU-2024:0317-1 |
| openSUSE Leap 15.5 | openconnect | 9.12-150400.15.3.1 | SUSE-SU-2024:0317-1 |
| openSUSE Leap 15.5 | stoken | 0.81-150400.13.2.1 | SUSE-SU-2024:0317-1 |
| openSUSE Leap 15.2 | openconnect | 7.08-lp152.9.4.2 | openSUSE-SU-2020:1027-1 |
| openSUSE Leap 15.1 | openconnect | 7.08-lp151.6.9.1 | openSUSE-SU-2020:0997-1 |
Advisories 8
- USN-9081-1 openconnect vulnerability Ubuntu Security Notices (USN) · Nov 13, 2026
- DLA-2212-1 openconnect - security update Debian Security (DSA / DLA) · Mar 9, 2026
- SUSE-SU-2024:0317-1 Security update for openconnect SUSE / openSUSE Security Updates · Feb 4, 2026
- SUSE-SU-2020:1930-1 Security update for openconnect SUSE / openSUSE Security Updates · Feb 4, 2026
- openSUSE-SU-2020:1027-1 Security update for openconnect SUSE / openSUSE Security Updates · Feb 4, 2026
- SUSE-SU-2020:1807-1 Security update for openconnect SUSE / openSUSE Security Updates · Feb 4, 2026
- openSUSE-SU-2020:0997-1 Security update for openconnect SUSE / openSUSE Security Updates · Feb 4, 2026
- openSUSE-SU-2024:11114-1 libopenconnect5-8.10-2.6 on GA media SUSE / openSUSE Security Updates · Feb 4, 2026
References
- https://gitlab.com/openconnect/openconnect/-/merge_requests/108
- https://bugs.gentoo.org/721570
- [debian-lts-announce] 20200516 [SECURITY] [DLA 2212-1] openconnect security update mailing-list
- FEDORA-2020-143735a624 vendor-advisory
- FEDORA-2020-2af15c566e vendor-advisory
- FEDORA-2020-bc22f06aa3 vendor-advisory
- GLSA-202006-15 vendor-advisory
- openSUSE-SU-2020:0997 vendor-advisory
- openSUSE-SU-2020:1027 vendor-advisory