CVE-2012-3291 Heap-based buffer overflow in OpenConnect 3.18 allows remote servers to cause a denial of service via a crafted greeting banner.
HighCVSS 7.8
EPSS 2.3%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Heap-based buffer overflow in OpenConnect 3.18 allows remote servers to cause a denial of service via a crafted greeting banner.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| debian/openconnect(Debian:12) | < 3.18-1 | 3.18-1 |
| debian/openconnect(Debian:13) | < 3.18-1 | 3.18-1 |
| debian/openconnect(Debian:14) | < 3.18-1 | 3.18-1 |
| infradead openconnect | <= 3.17 | No fix listed |
| infradead openconnect | = 1.00 | No fix listed |
| infradead openconnect | = 1.10 | No fix listed |
| infradead openconnect | = 1.20 | No fix listed |
| infradead openconnect | = 1.30 | No fix listed |
| infradead openconnect | = 1.40 | No fix listed |
| infradead openconnect | = 2.00 | No fix listed |
| infradead openconnect | = 2.01 | No fix listed |
| infradead openconnect | = 2.10 | No fix listed |
| infradead openconnect | = 2.11 | No fix listed |
| infradead openconnect | = 2.12 | No fix listed |
| infradead openconnect | = 2.20 | No fix listed |
| infradead openconnect | = 2.21 | No fix listed |
| infradead openconnect | = 2.22 | No fix listed |
| infradead openconnect | = 2.23 | No fix listed |
| infradead openconnect | = 2.24 | No fix listed |
| infradead openconnect | = 2.25 | No fix listed |
| infradead openconnect | = 2.26 | No fix listed |
| infradead openconnect | = 3.00 | No fix listed |
| infradead openconnect | = 3.01 | No fix listed |
| infradead openconnect | = 3.02 | No fix listed |
| infradead openconnect | = 3.11 | No fix listed |
Show 5 more
| Product | Affected versions | Fixed in |
|---|---|---|
| infradead openconnect | = 3.12 | No fix listed |
| infradead openconnect | = 3.13 | No fix listed |
| infradead openconnect | = 3.14 | No fix listed |
| infradead openconnect | = 3.15 | No fix listed |
| infradead openconnect | = 3.16 | No fix listed |
References
- Debian Security Tracker CVE-2012-3291 vendor-advisory
- git.infradead.org
- FEDORA-2012-6758 vendor-advisory
- openSUSE-SU-2013:1072 vendor-advisory
- DSA-2495 vendor-advisory
- www.infradead.org
- oval:org.mitre.oval:def:17242 signature vdb-entry
- bugs.debian.org issue-tracking