Heap-based buffer overflow in OpenConnect 3.18 allows remote servers to cause a denial of service via a crafted greeting banner.
2012-06-07T20:55:02.057
2025-04-11T00:51:21.963
Deferred
CVSSv2: 7.8 (HIGH)
AV:N/AC:L/Au:N/C:N/I:N/A:C
10.0
6.9
| Type | Vendor | Product | Version/Range | Vulnerable? |
|---|---|---|---|---|
| Application | infradead | openconnect | ≤ 3.17 | Yes |
| Application | infradead | openconnect | 1.00 | Yes |
| Application | infradead | openconnect | 1.10 | Yes |
| Application | infradead | openconnect | 1.20 | Yes |
| Application | infradead | openconnect | 1.30 | Yes |
| Application | infradead | openconnect | 1.40 | Yes |
| Application | infradead | openconnect | 2.00 | Yes |
| Application | infradead | openconnect | 2.01 | Yes |
| Application | infradead | openconnect | 2.10 | Yes |
| Application | infradead | openconnect | 2.11 | Yes |
| Application | infradead | openconnect | 2.12 | Yes |
| Application | infradead | openconnect | 2.20 | Yes |
| Application | infradead | openconnect | 2.21 | Yes |
| Application | infradead | openconnect | 2.22 | Yes |
| Application | infradead | openconnect | 2.23 | Yes |
| Application | infradead | openconnect | 2.24 | Yes |
| Application | infradead | openconnect | 2.25 | Yes |
| Application | infradead | openconnect | 2.26 | Yes |
| Application | infradead | openconnect | 3.00 | Yes |
| Application | infradead | openconnect | 3.01 | Yes |
| Application | infradead | openconnect | 3.02 | Yes |
| Application | infradead | openconnect | 3.11 | Yes |
| Application | infradead | openconnect | 3.12 | Yes |
| Application | infradead | openconnect | 3.13 | Yes |
| Application | infradead | openconnect | 3.14 | Yes |
| Application | infradead | openconnect | 3.15 | Yes |
| Application | infradead | openconnect | 3.16 | Yes |