CVE-2012-6128: Buffer Overflow
First published: Sun Feb 24 2013(Updated: )
Multiple stack-based buffer overflows in http.c in OpenConnect before 4.08 allow remote VPN gateways to cause a denial of service (application crash) via a long (1) hostname, (2) path, or (3) cookie list in a response.
Credit: secalert@redhat.com
| Affected Software | Affected Version | How to fix |
|---|---|---|
| infradead OpenConnect | <=4.07 | |
| infradead OpenConnect | =1.00 | |
| infradead OpenConnect | =1.10 | |
| infradead OpenConnect | =1.20 | |
| infradead OpenConnect | =1.30 | |
| infradead OpenConnect | =1.40 | |
| infradead OpenConnect | =2.00 | |
| infradead OpenConnect | =2.01 | |
| infradead OpenConnect | =2.10 | |
| infradead OpenConnect | =2.11 | |
| infradead OpenConnect | =2.12 | |
| infradead OpenConnect | =2.20 | |
| infradead OpenConnect | =2.21 | |
| infradead OpenConnect | =2.22 | |
| infradead OpenConnect | =2.23 | |
| infradead OpenConnect | =2.24 | |
| infradead OpenConnect | =2.25 | |
| infradead OpenConnect | =2.26 | |
| infradead OpenConnect | =3.00 | |
| infradead OpenConnect | =3.01 | |
| infradead OpenConnect | =3.02 | |
| infradead OpenConnect | =3.11 | |
| infradead OpenConnect | =3.12 | |
| infradead OpenConnect | =3.13 | |
| infradead OpenConnect | =3.14 | |
| infradead OpenConnect | =3.15 | |
| infradead OpenConnect | =3.16 | |
| infradead OpenConnect | =3.17 | |
| infradead OpenConnect | =3.18 | |
| infradead OpenConnect | =3.19 | |
| infradead OpenConnect | =3.20 | |
| infradead OpenConnect | =3.99 | |
| infradead OpenConnect | =4.00 | |
| infradead OpenConnect | =4.01 | |
| infradead OpenConnect | =4.02 | |
| infradead OpenConnect | =4.03 | |
| infradead OpenConnect | =4.04 | |
| infradead OpenConnect | =4.05 | |
| infradead OpenConnect | =4.06 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
- http://git.infradead.org/users/dwmw2/openconnect.git/commitdiff/26f752c3dbf69227679fc6bebb4ae071aecec491
- http://lists.opensuse.org/opensuse-updates/2013-06/msg00115.html
- http://www.debian.org/security/2013/dsa-2623
- http://www.infradead.org/openconnect/changelog.html
- http://www.mandriva.com/security/advisories?name=MDVSA-2013:108
- http://www.openwall.com/lists/oss-security/2013/02/12/7
- http://www.securityfocus.com/bid/57884
- https://exchange.xforce.ibmcloud.com/vulnerabilities/82058
- https://wiki.mageia.org/en/Support/Advisories/MGASA-2013-0060
- agent/type
- agent/softwarecombine
- collector/mitre-cve
- source/MITRE
- agent/author
- agent/last-modified-date
- agent/severity
- agent/weakness
- agent/references
- agent/description
- agent/first-publish-date
- agent/event
- agent/source
- agent/tags
- collector/nvd-index
- agent/software-canonical-lookup-request
- vendor/infradead
- canonical/infradead openconnect
- version/infradead openconnect/4.07
- version/infradead openconnect/1.00
- version/infradead openconnect/1.10
- version/infradead openconnect/1.20
- version/infradead openconnect/1.30
- version/infradead openconnect/1.40
- version/infradead openconnect/2.00
- version/infradead openconnect/2.01
- version/infradead openconnect/2.10
- version/infradead openconnect/2.11
- version/infradead openconnect/2.12
- version/infradead openconnect/2.20
- version/infradead openconnect/2.21
- version/infradead openconnect/2.22
- version/infradead openconnect/2.23
- version/infradead openconnect/2.24
- version/infradead openconnect/2.25
- version/infradead openconnect/2.26
- version/infradead openconnect/3.00
- version/infradead openconnect/3.01
- version/infradead openconnect/3.02
- version/infradead openconnect/3.11
- version/infradead openconnect/3.12
- version/infradead openconnect/3.13
- version/infradead openconnect/3.14
- version/infradead openconnect/3.15
- version/infradead openconnect/3.16
- version/infradead openconnect/3.17
- version/infradead openconnect/3.18
- version/infradead openconnect/3.19
- version/infradead openconnect/3.20
- version/infradead openconnect/3.99
- version/infradead openconnect/4.00
- version/infradead openconnect/4.01
- version/infradead openconnect/4.02
- version/infradead openconnect/4.03
- version/infradead openconnect/4.04
- version/infradead openconnect/4.05
- version/infradead openconnect/4.06