Vulnerability in Infradead Openconnect
CVE-2009-5009
Double free vulnerability in OpenConnect before 1.40 might allow remote AnyConnect SSL VPN servers to cause a denial of service (application crash) or possibly have unspecified other impact via a crafted DTLS Cipher option during a reconnect operation.
EPSS: 0.010 (58.6th percentile) — read the EPSS interpretation.
Affected products
- Infradead Openconnect — versions 1.10, 1.00, 1.20
- N/a — versions n/a
Weakness classification (CWE)
References
- cve@mitre.org (x_refsource_CONFIRM)