CVE-2009-5009: Double Free
Double free vulnerability in OpenConnect before 1.40 might allow remote AnyConnect SSL VPN servers to cause a denial of service (application crash) or possibly have unspecified other impact via a crafted DTLS Cipher option during a reconnect operation.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2009-5009?
CVE-2009-5009 is classified as a high severity vulnerability due to its potential for causing application crashes and denial of service.
How do I fix CVE-2009-5009?
To fix CVE-2009-5009, you should upgrade to OpenConnect version 1.40 or later.
What versions of OpenConnect are affected by CVE-2009-5009?
CVE-2009-5009 affects OpenConnect versions prior to 1.40, including 1.00, 1.10, 1.20, and up to 1.30.
Can CVE-2009-5009 lead to data breaches?
While CVE-2009-5009 primarily causes denial of service, it may also expose systems to additional risks due to the application crash.
What impact does CVE-2009-5009 have on users?
CVE-2009-5009 can lead to application crashes, resulting in interrupted services for users relying on the OpenConnect SSL VPN.