CVE-2020-12823 log

Source
Severity Low
Remote No
Type Arbitrary code execution
Description
OpenConnect 8.09 has a buffer overflow in get_cert_name in gnutls.c, causing a denial of service (application crash) or possibly unspecified other impact, via crafted data in a local certificate.
Group Package Affected Fixed Severity Status Ticket
AVG-1157 openconnect 1:8.05-1 1:8.10-1 Low Fixed
Date Advisory Group Package Severity Type
19 May 2020 ASA-202005-11 AVG-1157 openconnect Low arbitrary code execution
References
https://gitlab.com/openconnect/openconnect/-/merge_requests/108