CVE-2020-12823: Buffer Overflow
Published May 12, 2020
·Updated
OpenConnect 8.09 has a buffer overflow, causing a denial of service (application crash) or possibly unspecified other impact, via crafted certificate data to getcertname in gnutls.c.
Affected Software
7 affected components
Infradead Openconnect=8.09
Fedoraproject Fedora=30
Fedoraproject Fedora=31
Fedoraproject Fedora=32
Debian Debian Linux=8.0
openSUSE Leap=15.1
openSUSE Leap=15.2
Remediation
Event History
May 12, 2020
CVE Published
via MITRE·05:07 PM
Data Sourced
via MITRE·05:07 PM
Description
Frequently Asked Questions
1
What is the severity of CVE-2020-12823?
CVE-2020-12823 has a severity rating that indicates it can cause denial of service through application crashes.
2
How do I fix CVE-2020-12823?
To fix CVE-2020-12823, you should update OpenConnect to version 8.10 or later as recommended by security advisories.
3
What systems are affected by CVE-2020-12823?
CVE-2020-12823 affects OpenConnect version 8.09 and specific Fedora, Debian, and openSUSE releases.
4
What type of vulnerability is CVE-2020-12823?
CVE-2020-12823 is a buffer overflow vulnerability that may lead to application crashes.
5
Can CVE-2020-12823 affect my network security?
Yes, CVE-2020-12823 can impact network security by causing applications to crash, leading to potential denial of service.