Vulmon Recent Vulnerabilities Research Posts Trends Blog About Contact
9.8
CVSSv3

CVE-2020-12823

Published: 12/05/2020 Updated: 07/11/2023
CVSS v2 Base Score: 7.5 | Impact Score: 6.4 | Exploitability Score: 10
CVSS v3 Base Score: 9.8 | Impact Score: 5.9 | Exploitability Score: 3.9
VMScore: 668
Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Subscribe to Openconnect

Vulnerability Summary

OpenConnect 8.09 has a buffer overflow, causing a denial of service (application crash) or possibly unspecified other impact, via crafted certificate data to get_cert_name in gnutls.c.

Vulnerability Trend

Vulnerable Product Search on Vulmon Subscribe to Product

infradead openconnect 8.09

fedoraproject fedora 30

fedoraproject fedora 31

fedoraproject fedora 32

debian debian linux 8.0

opensuse leap 15.1

opensuse leap 15.2

Vendor Advisories

Debian CVElist Bug Report Logs: openconnect: buffer overflow in certificate handling (CVE-2020-12823)
Debian Bug report logs - #960620 openconnect: buffer overflow in certificate handling (CVE-2020-12823) Package: openconnect; Maintainer for openconnect is Mike Miller <mtmiller@debianorg>; Source for openconnect is src:openconnect (PTS, buildd, popcon) Reported by: Luca Boccassi <bluca@debianorg> Date: Thu, 14 May ...
Arch Linux Issues:
Severity Unknown Remote Unknown Type Unknown Description AVG-1157 openconnect 1:805-1 Unknown Vulnerable ...

References

CWE-120https://bugs.gentoo.org/721570https://gitlab.com/openconnect/openconnect/-/merge_requests/108https://lists.debian.org/debian-lts-announce/2020/05/msg00015.htmlhttps://security.gentoo.org/glsa/202006-15http://lists.opensuse.org/opensuse-security-announce/2020-07/msg00039.htmlhttp://lists.opensuse.org/opensuse-security-announce/2020-07/msg00056.htmlhttps://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/AYSXLXAPXD2T73T6JMHI5G2WP7KHAGMN/https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/BEVTIH5UFX35CC7MVSYBGRM3D66ACFD5/https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/25MFX4AZE7RDCUWOL4ZOE73YBOPUMQDX/https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=960620https://nvd.nist.gov
CVSSv3
CVSSv2
CVSSv3
VMScore
Recommendations:
validationCVE-2024-34413CVE-2024-34089CVE-2024-33408localSQLCVE-2024-0402CVE-2024-33910CVE-2024-31848
Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started

Vulmon Search

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

About

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Products

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Connect

Twitter Reddit Linkedin Facebook