USN-9081-1: OpenConnect vulnerability
It was discovered that OpenConnect incorrectly handled certain certificate data, leading to a buffer overflow. A remote attacker could possibly use this issue to cause OpenConnect to crash, resulting in a denial of service, or possibly execute arbitrary code.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
ubuntu/libopenconnect5to a version that resolves this vulnerability.Fixed in Ubuntu Pro - Upgrade
Upgrade
ubuntu/openconnectto a version that resolves this vulnerability.Fixed in Ubuntu Pro - Upgrade
Upgrade
ubuntu/libopenconnect5to a version that resolves this vulnerability.Fixed in 7.06-2ubuntu0.1~esm1 - Upgrade
Upgrade
ubuntu/openconnectto a version that resolves this vulnerability.Fixed in 7.06-2ubuntu0.1~esm1 - Upgrade
Upgrade
ubuntu/openconnectto a version that resolves this vulnerability.Fixed in 7.08-3ubuntu0.18.04.2+esm1 - Upgrade
Upgrade
ubuntu/openconnectto a version that resolves this vulnerability.Fixed in 8.05-1ubuntu0.1~esm1
Event History
Frequently Asked Questions
What does an attacker need to exploit this issue?
The issue is triggered through certain certificate data, so exploitation requires a remote attacker to cause OpenConnect to process malicious certificate data.
What is the potential impact if exploitation succeeds?
A successful attack could crash OpenConnect and cause a denial of service. It may also allow arbitrary code execution.
Which Ubuntu software packages are identified as affected?
The advisory identifies ubuntu/libopenconnect5 and ubuntu/openconnect.