CVE-2009-5009

EPSS 0.30%

Published: 10/14/2010Modified: 4/28/2026

Also known as:DEBIAN-CVE-2009-5009

Description

Double free vulnerability in OpenConnect before 1.40 might allow remote AnyConnect SSL VPN servers to cause a denial of service (application crash) or possibly have unspecified other impact via a crafted DTLS Cipher option during a reconnect operation.

Affected packages (1)

Debian/openconnectfrom 0, < 1.40-1

References (1)

ADVISORYhttps://security-tracker.debian.org/tracker/CVE-2009-5009