[USN-4565-1] OpenConnect vulnerability
Paulo Flabiano Smorigo
pfsmorigo at canonical.com
Tue Oct 6 13:43:12 UTC 2020
Ubuntu Security Notice USN-4565-1
October 05, 2020
A security issue affects these releases of Ubuntu and its derivatives:
- Ubuntu 18.04 LTS
OpenConnect could be made to crash if it received specially crafted
- openconnect: An SSL VPN client
It was discovered that OpenConnect has a buffer overflow when a malicious
server uses HTTP chunked encoding with crafted chunk sizes. An attacker
could use it to provoke a denial of service (crash).
The problem can be corrected by updating your system to the following
Ubuntu 18.04 LTS:
In general, a standard system update will make all the necessary changes.
-------------- next part --------------
A non-text attachment was scrubbed...
Size: 833 bytes
Desc: not available
More information about the ubuntu-security-announce