CVE-2012-6128
EPSS 0.97%openconnect - buffer overflow
發布日:2013/2/24修改日:2026/4/28
也稱為:DEBIAN-CVE-2012-6128
描述
Multiple stack-based buffer overflows in http.c in OpenConnect before 4.08 allow remote VPN gateways to cause a denial of service (application crash) via a long (1) hostname, (2) path, or (3) cookie list in a response.
受影響套件(2)
- Debian/openconnectfrom 0, < 3.20-3
- Debian/openconnectfrom 0, < 2.25-0.1+squeeze2