CVE-2012-3291: Buffer Overflow
Published Jun 7, 2012
·Updated
Heap-based buffer overflow in OpenConnect 3.18 allows remote servers to cause a denial of service via a crafted greeting banner.
Affected Software
27 affected components
Infradead Openconnect<=3.17
Infradead Openconnect=1.00
Infradead Openconnect=1.10
Infradead Openconnect=1.20
Infradead Openconnect=1.30
Infradead Openconnect=1.40
Infradead Openconnect=2.00
Infradead Openconnect=2.01
Infradead Openconnect=2.10
Infradead Openconnect=2.11
Infradead Openconnect=2.12
Infradead Openconnect=2.20
Infradead Openconnect=2.21
Infradead Openconnect=2.22
Infradead Openconnect=2.23
Infradead Openconnect=2.24
Infradead Openconnect=2.25
Infradead Openconnect=2.26
Infradead Openconnect=3.00
Infradead Openconnect=3.01
Infradead Openconnect=3.02
Infradead Openconnect=3.11
Infradead Openconnect=3.12
Infradead Openconnect=3.13
Infradead Openconnect=3.14
Infradead Openconnect=3.15
Infradead Openconnect=3.16
Event History
Jun 7, 2012
CVE Published
via MITRE·08:00 PM
Data Sourced
via MITRE·08:00 PM
Description
Frequently Asked Questions
1
What is the severity of CVE-2012-3291?
CVE-2012-3291 has a medium severity rating due to its potential to cause denial of service.
2
How do I fix CVE-2012-3291?
To fix CVE-2012-3291, users should upgrade to OpenConnect version 3.18 or later.
3
What is the impact of CVE-2012-3291?
The impact of CVE-2012-3291 can lead to a denial of service when remote servers send a crafted greeting banner.
4
Which versions of OpenConnect are affected by CVE-2012-3291?
CVE-2012-3291 affects OpenConnect versions up to and including 3.17.
5
Is CVE-2012-3291 a remote vulnerability?
Yes, CVE-2012-3291 is a remote vulnerability that allows attackers to exploit the issue from a distance.