CVE-2020-12105
CVE-2020-12105
This page contains facts from public vulnerability sources. Check the original advisory before updating.
OpenConnect through 8.08 mishandles negative return values from X509_check_ function calls, which might assist attackers in performing man-in-the-middle attacks.
CVSS 5.9 · Medium · EPSS 1.7%
- Published
- Updated
Stack: system
Affected products and versions
n/a
- Versions
- n/a: Affected
No fix published
openconnect Debian:12
- Versions
- 9.01-3
- 9.12-1
- 9.12-1.1~exp1
- 9.12-2
- 9.12-3
- 9.12-3.1
- 9.12-3.2
- 9.12-3.3
- 9.21-1
- 9.21-2
- 9.21-3
- 9.21-4
- 9.21-5
- Affected ranges
- ECOSYSTEM: (−∞, +∞)
No fix published
openconnect Debian:13
- Versions
- 9.12-3
- 9.12-3+deb13u1
- 9.12-3+deb13u2
- 9.12-3.1
- 9.12-3.2
- 9.12-3.3
- 9.21-1
- 9.21-2
- 9.21-3
- 9.21-4
- 9.21-5
- Affected ranges
- ECOSYSTEM: (−∞, +∞)
No fix published
openconnect Debian:14
- Versions
- 9.12-3
- 9.12-3.1
- 9.12-3.2
- 9.12-3.3
- 9.21-1
- 9.21-2
- 9.21-3
- 9.21-4
- 9.21-5
- Affected ranges
- ECOSYSTEM: (−∞, +∞)
No fix published