CVE-2009-5009
CVE-2009-5009
This page contains facts from public vulnerability sources. Check the original advisory before updating.
Double free vulnerability in OpenConnect before 1.40 might allow remote AnyConnect SSL VPN servers to cause a denial of service (application crash) or possibly have unspecified other impact via a crafted DTLS Cipher option during a reconnect operation.
EPSS 1.0% · Fix available
- Published
- Updated
Stack: system
Affected products and versions
n/a
- Versions
- n/a: Affected
No fix published
openconnect Debian:12
- Affected ranges
- ECOSYSTEM: < 1.40-1
Update to 1.40-1
openconnect Debian:13
- Affected ranges
- ECOSYSTEM: < 1.40-1
Update to 1.40-1
openconnect Debian:14
- Affected ranges
- ECOSYSTEM: < 1.40-1
Update to 1.40-1