medium5.9
CVE-2020-12105
OpenConnect through 8.08 mishandles negative return values from X509_check_ function calls, which might assist attackers in performing man-in-the-middle attack…
Impact
OpenConnect through 8.08 mishandles negative return values from X509_check_ function calls, which might assist attackers in performing man-in-the-middle attacks.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Infradead | Openconnect | through 8.08 |
| Opensuse | Leap | Version 15.1 |
Weakness classification
References
- NVD record
- CVE.org record
- http://lists.opensuse.org/opensuse-security-announce/2020-05/msg00039.html
- https://gitlab.com/openconnect/openconnect/-/merge_requests/96
- https://security.gentoo.org/glsa/202006-15
- http://lists.opensuse.org/opensuse-security-announce/2020-05/msg00039.html
- https://gitlab.com/openconnect/openconnect/-/merge_requests/96
- https://security.gentoo.org/glsa/202006-15