medium5.0
CVE-2009-5009
Double free vulnerability in OpenConnect before 1.40 might allow remote AnyConnect SSL VPN servers to cause a denial of service (application crash) or possibly…
Impact
Double free vulnerability in OpenConnect before 1.40 might allow remote AnyConnect SSL VPN servers to cause a denial of service (application crash) or possibly have unspecified other impact via a crafted DTLS Cipher option during a reconnect operation.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Infradead | Openconnect | through 1.30 Versions 1.00, 1.10, 1.20 |