PT-2020-4072 · Openconnect+3 · Openconnect+3

David Woodhouse · Published 2020-05-12 · Updated 2024-06-15 · CVE-2020-12823

Positive Technologies (AI Summary)

CVSS v2.0

10

Critical

Base vector

AV:N/AC:L/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions: OpenConnect version 8.09

Description: The issue is related to a buffer overflow error in the get cert name function in gnutls.c, which can be exploited by a remote attacker. This exploitation can lead to a denial of service, causing the application to crash, or possibly other unspecified impacts. The vulnerability is triggered by crafted certificate data.

Recommendations: For OpenConnect version 8.09, consider disabling the get cert name function in gnutls.c as a temporary workaround to prevent potential exploitation until a patch is available. Restrict access to crafted certificate data to minimize the risk of triggering the buffer overflow. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

DoS

Buffer Overflow

Weakness Enumeration

CWE-120

Related Identifiers

ALT-PU-2020-1970

BDU:2020-04472

CVE-2020-12823

DLA-2212-1

MGASA-2020-0251

OPENSUSE-SU-2020:0997-1

OPENSUSE-SU-2020:1027-1

OPENSUSE-SU-2020_0997-1

OPENSUSE-SU-2020_1027-1

OPENSUSE-SU-2024:11114-1

SUSE-SU-2020:1807-1

SUSE-SU-2020:1930-1

SUSE-SU-2024:0317-1

Affected Products

Alt Linux

Astra Linux

Openconnect

Suse

References · 51

• 🔥 https://bugs.gentoo.org/721570 · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2020-12823 · Security Note
• https://osv.dev/vulnerability/DEBIAN-CVE-2020-12823 · Vendor Advisory
• https://lists.fedoraproject.org/archives/list/[e-mail]/message/AYSXLXAPXD2T73T6JMHI5G2WP7KHAGMN · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2020-12823 · Vendor Advisory
• https://security-tracker.debian.org/tracker/CVE-2020-12823 · Vendor Advisory
• https://osv.dev/vulnerability/SUSE-SU-2020:1930-1 · Vendor Advisory
• https://osv.dev/vulnerability/openSUSE-SU-2020:0997-1 · Vendor Advisory
• https://osv.dev/vulnerability/openSUSE-SU-2020:1027-1 · Vendor Advisory
• https://osv.dev/vulnerability/SUSE-SU-2020:1807-1 · Vendor Advisory
• https://osv.dev/vulnerability/MGASA-2020-0251 · Vendor Advisory
• https://ubuntu.com/security/CVE-2020-12823 · Vendor Advisory
• https://gitlab.com/openconnect/openconnect/-/merge_requests/108 · Patch
• https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/25MFX4AZE7RDCUWOL4ZOE73YBOPUMQDX · Vendor Advisory
• http://lists.opensuse.org/opensuse-security-announce/2020-07/msg00056.html · Vendor Advisory