Buffer overflow in Infradead Openconnect

CVE-2012-6128

Multiple stack-based buffer overflows in http.c in OpenConnect before 4.08 allow remote VPN gateways to cause a denial of service (application crash) via a long (1) hostname, (2) path, or (3) cookie list in a response.

Vulnerability class: Buffer Overflow

EPSS: 0.026 (84.1th percentile) — read the EPSS interpretation.

Affected products

Weakness classification (CWE)

References