Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
Multiple stack-based buffer overflows in http.c in OpenConnect before 4.08 allow remote VPN gateways to cause a denial of service (application crash) via a long (1) hostname, (2) path, or (3) cookie list in a response.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
OpenConnect VPN Gateway 基于栈的缓冲区溢出漏洞
Vulnerability Description
OpenConnect是思科AnyConnect VPN的一个开放客户端。 OpenConnect 4.08之前版本中的http.c中存在多个基于栈的缓冲区溢出漏洞。通过在响应中加入较长的(1)主机名,(2)路径,或者(3)cookie列表,远程VPN网关攻击者可利用该漏洞导致拒绝服务(应用程序崩溃)。
CVSS Information
N/A
Vulnerability Type
N/A