infradead kayıtları
infradead üreticisine ait 10 yayımlanmış kayıt.
Araştırmacı profili
- KEV’e giren
- 0 · %0
- Silahlaştırılmış
- 0 · %0
- Pre-auth RCE
- 0
- Düzeltme kaydı olan
- %100
- Yayından KEV’e ortanca
- KEV’e giren kayıt yok
Tekrar eden sınıflar
- CWE-119 Improper Restriction of Operations within the Bounds of a Memory Buffer2
- CWE-120 Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')2
- CWE-20 Improper Input Validation1
- CWE-200 Exposure of Sensitive Information to an Unauthorized Actor1
- CWE-399 Resource Management Errors1
- CWE-755 Improper Handling of Exceptional Conditions1
Bu üreticide en sık görülen zafiyet sınıfları: nereye bakmalı.
CWETüm kayıtlar
10 kayıt| Aksiyon | CVE | Zafiyet | Ciddiyet | KEV | EPSS | Yayın |
|---|---|---|---|---|---|---|
40Planlayın | CVE-2020-12823İstismar yok | OpenConnect 8.09 has a buffer overflow, causing a denial of service (application crash) or possibly unspecified other impact, via crafted ceinfradead · openconnect · CWE-120 | Kritik9,8 | — | %4,7 | 12 May 2020 |
40Planlayın | CVE-2019-16239İstismar yok | process_http_response in OpenConnect before 8.05 has a Buffer Overflow when a malicious server uses HTTP chunked encoding with crafted chunkinfradead · openconnect · CWE-120 | Kritik9,8 | — | %3,4 | 17 Eyl 2019 |
39İzleyin | CVE-2013-7098İstismar yok | OpenConnect VPN client with GnuTLS before 5.02 contains a heap overflow if MTU is increased on reconnection.infradead · openconnect · CWE-787 | Kritik9,8 | — | %1,5 | 13 Şub 2020 |
32İzleyin | CVE-2012-3291İstismar yok | Heap-based buffer overflow in OpenConnect 3.18 allows remote servers to cause a denial of service via a crafted greeting banner.infradead · openconnect · CWE-119 | Yüksek7,8 | — | %2,2 | 7 Haz 2012 |
25İzleyin | CVE-2010-3901İstismar yok | OpenConnect before 2.25 does not properly validate X.509 certificates, which allows man-in-the-middle attackers to spoof arbitrary AnyConnecinfradead · openconnect · CWE-20 | Orta6,4 | — | %0,5 | 14 Eki 2010 |
24İzleyin | CVE-2020-12105İstismar yok | OpenConnect through 8.08 mishandles negative return values from X509_check_ function calls, which might assist attackers in performing man-iinfradead · openconnect · CWE-755 | Orta5,9 | — | %1,7 | 23 Nis 2020 |
21İzleyin | CVE-2012-6128İstismar yok | Multiple stack-based buffer overflows in http.c in OpenConnect before 4.08 allow remote VPN gateways to cause a denial of service (applicatiinfradead · openconnect · CWE-119 | Orta5,0 | — | %2,6 | 24 Şub 2013 |
21İzleyin | CVE-2010-3902İstismar yok | OpenConnect before 2.26 places the webvpn cookie value in the debugging output, which might allow remote attackers to obtain sensitive inforinfradead · openconnect · CWE-200 | Orta5,0 | — | %2,2 | 14 Eki 2010 |
20İzleyin | CVE-2009-5009İstismar yok | Double free vulnerability in OpenConnect before 1.40 might allow remote AnyConnect SSL VPN servers to cause a denial of service (applicationinfradead · openconnect · CWE-399 | Orta5,0 | — | %0,9 | 14 Eki 2010 |
20İzleyin | CVE-2010-3903İstismar yok | Unspecified vulnerability in OpenConnect before 2.23 allows remote AnyConnect SSL VPN servers to cause a denial of service (application crasinfradead · openconnect | Orta5,0 | — | %0,9 | 14 Eki 2010 |
- CVE-2020-1282340Planlayın
OpenConnect 8.09 has a buffer overflow, causing a denial of service (application crash) or possibly unspecified other impact, via crafted ce
KritikCVSS 9,8İstismar yokEPSS %4infradead · openconnect12 May 2020
- CVE-2019-1623940Planlayın
process_http_response in OpenConnect before 8.05 has a Buffer Overflow when a malicious server uses HTTP chunked encoding with crafted chunk
KritikCVSS 9,8İstismar yokEPSS %3infradead · openconnect17 Eyl 2019
- CVE-2013-709839İzleyin
OpenConnect VPN client with GnuTLS before 5.02 contains a heap overflow if MTU is increased on reconnection.
KritikCVSS 9,8İstismar yokEPSS %1infradead · openconnect13 Şub 2020
- CVE-2012-329132İzleyin
Heap-based buffer overflow in OpenConnect 3.18 allows remote servers to cause a denial of service via a crafted greeting banner.
YüksekCVSS 7,8İstismar yokEPSS %2infradead · openconnect7 Haz 2012
- CVE-2010-390125İzleyin
OpenConnect before 2.25 does not properly validate X.509 certificates, which allows man-in-the-middle attackers to spoof arbitrary AnyConnec
OrtaCVSS 6,4İstismar yokEPSS %0infradead · openconnect14 Eki 2010
- CVE-2020-1210524İzleyin
OpenConnect through 8.08 mishandles negative return values from X509_check_ function calls, which might assist attackers in performing man-i
OrtaCVSS 5,9İstismar yokEPSS %1infradead · openconnect23 Nis 2020
- CVE-2012-612821İzleyin
Multiple stack-based buffer overflows in http.c in OpenConnect before 4.08 allow remote VPN gateways to cause a denial of service (applicati
OrtaCVSS 5,0İstismar yokEPSS %2infradead · openconnect24 Şub 2013
- CVE-2010-390221İzleyin
OpenConnect before 2.26 places the webvpn cookie value in the debugging output, which might allow remote attackers to obtain sensitive infor
OrtaCVSS 5,0İstismar yokEPSS %2infradead · openconnect14 Eki 2010
- CVE-2009-500920İzleyin
Double free vulnerability in OpenConnect before 1.40 might allow remote AnyConnect SSL VPN servers to cause a denial of service (application
OrtaCVSS 5,0İstismar yokEPSS %0infradead · openconnect14 Eki 2010
- CVE-2010-390320İzleyin
Unspecified vulnerability in OpenConnect before 2.23 allows remote AnyConnect SSL VPN servers to cause a denial of service (application cras
OrtaCVSS 5,0İstismar yokEPSS %0infradead · openconnect14 Eki 2010