UBUNTU-CVE-2020-12823: Buffer Overflow

Q: Who can exploit this issue?

An unauthenticated remote attacker who can provide crafted certificate data to the affected OpenConnect client can trigger the buffer overflow. The stated attack vector is network-based and requires no privileges or user interaction.

Q: What is the likely impact if exploitation succeeds?

The documented impact includes an application crash, resulting in denial of service. The advisory also notes the possibility of other unspecified impact, and the severity metrics indicate potential high impact to confidentiality, integrity, and availability.

Q: How can I determine whether a system is affected?

Check whether the system is using OpenConnect version 8.09. The provided data identifies that version as affected but does not provide Ubuntu package versions or fixed-version details.

Published May 12, 2020

Updated

OpenConnect 8.09 has a buffer overflow, causing a denial of service (application crash) or possibly unspecified other impact, via crafted certificate data to getcertname in gnutls.c.

Affected Software

3 affected componentsFixes available

ubuntu/openconnect<7.06-2ubuntu0.1~esm1

7.06-2ubuntu0.1~esm1

ubuntu/openconnect<7.08-3ubuntu0.18.04.2+esm1

7.08-3ubuntu0.18.04.2+esm1

ubuntu/openconnect<8.05-1ubuntu0.1~esm1

8.05-1ubuntu0.1~esm1

Remediation

Recommended actions to resolve this vulnerability, in priority order.

Upgrade
Upgrade ubuntu/openconnect to a version that resolves this vulnerability.
Fixed in 7.06-2ubuntu0.1~esm1
Upgrade
Upgrade ubuntu/openconnect to a version that resolves this vulnerability.
Fixed in 7.08-3ubuntu0.18.04.2+esm1
Upgrade
Upgrade ubuntu/openconnect to a version that resolves this vulnerability.
Fixed in 8.05-1ubuntu0.1~esm1

Event History

May 12, 2020

CVE Published

via OSV·06:15 PM

Data Sourced

via OSV·06:15 PM

DescriptionSeverityAffected Software

Frequently Asked Questions

Who can exploit this issue?

An unauthenticated remote attacker who can provide crafted certificate data to the affected OpenConnect client can trigger the buffer overflow. The stated attack vector is network-based and requires no privileges or user interaction.

What is the likely impact if exploitation succeeds?

The documented impact includes an application crash, resulting in denial of service. The advisory also notes the possibility of other unspecified impact, and the severity metrics indicate potential high impact to confidentiality, integrity, and availability.

How can I determine whether a system is affected?

Check whether the system is using OpenConnect version 8.09. The provided data identifies that version as affected but does not provide Ubuntu package versions or fixed-version details.

UBUNTU-CVE-2020-12823: Buffer Overflow

Affected Software

Remediation

Event History

Frequently Asked Questions

Who can exploit this issue?

What is the likely impact if exploitation succeeds?

How can I determine whether a system is affected?

Company

Resources

Contact

Frequently Asked Questions

Who can exploit this issue?

What is the likely impact if exploitation succeeds?

How can I determine whether a system is affected?