Openconnect
Approved changes feed: RSS · Atom
cpe:2.3:a:infradead:openconnect:*:*:*:*:*:*:*:*part: a version: * update: *
| Vendor | Infradead (ad724092-f538-59ef-93df-057fe5557141) |
|---|---|
| Product | Openconnect (3d2e0f81-6ca1-5ea3-aade-47eff9ce628d) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
Notes
Imported from purl2cpe mapping
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
pkg:deb/debian/openconnect |
purl2cpe | 2026-06-01 10:14:44.914111 |
pkg:deb/ubuntu/openconnect |
purl2cpe | 2026-06-01 10:14:44.914116 |
pkg:github/openconnect/openconnect |
purl2cpe | 2026-06-01 10:14:44.914119 |
pkg:rpm/fedora/openconnect |
purl2cpe | 2026-06-01 10:14:44.914123 |
pkg:rpm/opensuse/openconnect |
purl2cpe | 2026-06-01 10:14:44.914127 |
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2020-12105 |
vulnerable | 2026-06-08 05:17:56.466476 |
Details available
OpenConnect through 8.08 mishandles negative return values from X509_check_ function calls, which might assist attackers in performing man-in-the-middle attacks.
Published: 2020-04-23T16:15:29.000Z
Updated: 2024-08-04T11:48:58.489Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2019-16239 |
vulnerable | 2026-06-08 05:13:07.946390 |
Details available
process_http_response in OpenConnect before 8.05 has a Buffer Overflow when a malicious server uses HTTP chunked encoding with crafted chunk sizes.
Published: 2019-09-17T11:37:21.000Z
Updated: 2024-08-05T01:10:41.727Z Reference links
|
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2013-7098 |
vulnerable | 2026-06-08 05:05:08.365485 |
Details available
OpenConnect VPN client with GnuTLS before 5.02 contains a heap overflow if MTU is increased on reconnection.
Published: 2020-02-13T22:32:01.000Z
Updated: 2024-08-06T17:53:45.994Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2012-6128 |
vulnerable | 2026-06-08 05:02:59.579661 |
Details available
Multiple stack-based buffer overflows in http.c in OpenConnect before 4.08 allow remote VPN gateways to cause a denial of service (application crash) via a long (1) hostname, (2) path, or (3) cookie list in a response.
Published: 2013-02-24T19:00:00.000Z
Updated: 2024-08-06T21:28:39.305Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2012-3291 |
vulnerable | 2026-06-08 05:02:08.956470 |
Details available
Heap-based buffer overflow in OpenConnect 3.18 allows remote servers to cause a denial of service via a crafted greeting banner.
Published: 2012-06-07T20:00:00.000Z
Updated: 2024-08-06T19:57:50.461Z Reference links
|
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2010-3903 |
vulnerable | 2026-06-08 04:55:17.776905 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2010-3902 |
vulnerable | 2026-06-08 04:55:17.775159 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2010-3901 |
vulnerable | 2026-06-08 04:55:17.772388 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2009-5009 |
vulnerable | 2026-06-08 04:51:50.640878 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.
Inspect record JSON
Open this panel to browse, search, copy or download the JSON record.