Vulnerability Details : CVE-2020-12823

OpenConnect 8.09 has a buffer overflow, causing a denial of service (application crash) or possibly unspecified other impact, via crafted certificate data to get_cert_name in gnutls.c.

Vulnerability category: OverflowDenial of service

Published 2020-05-12 18:15:13

Updated 2023-01-27 18:44:34

Source MITRE

View at NVD, CVE.org

Exploit prediction scoring system (EPSS) score for CVE-2020-12823

Probability of exploitation activity in the next 30 days: 1.46%

Percentile, the proportion of vulnerabilities that are scored at or less: ~ 85 % EPSS Score History EPSS FAQ

CVSS scores for CVE-2020-12823

Base Score	Base Severity	CVSS Vector	Exploitability Score	Impact Score	Source
7.5	HIGH	AV:N/AC:L/Au:N/C:P/I:P/A:P	10.0	6.4	[email protected]
Access Vector: Network Access Complexity: Low Authentication: None Confidentiality Impact: Partial Integrity Impact: Partial Availability Impact: Partial
9.8	CRITICAL	CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H	3.9	5.9	[email protected]
Attack Vector: Network Attack Complexity: Low Privileges Required: None User Interaction: None Scope: Unchanged Confidentiality: High Integrity: High Availability: High

CWE ids for CVE-2020-12823

CWE-120 Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')

The product copies an input buffer to an output buffer without verifying that the size of the input buffer is less than the size of the output buffer, leading to a buffer overflow.

Assigned by: [email protected] (Primary)

References for CVE-2020-12823

http://lists.opensuse.org/opensuse-security-announce/2020-07/msg00056.html

Mailing List;Third Party Advisory
http://lists.opensuse.org/opensuse-security-announce/2020-07/msg00039.html

Mailing List;Third Party Advisory
https://lists.fedoraproject.org/archives/list/[email protected]/message/AYSXLXAPXD2T73T6JMHI5G2WP7KHAGMN/

Mailing List;Third Party Advisory
https://lists.fedoraproject.org/archives/list/[email protected]/message/25MFX4AZE7RDCUWOL4ZOE73YBOPUMQDX/

Mailing List;Third Party Advisory
https://lists.fedoraproject.org/archives/list/[email protected]/message/BEVTIH5UFX35CC7MVSYBGRM3D66ACFD5/

Mailing List;Third Party Advisory
https://bugs.gentoo.org/721570

Exploit;Third Party Advisory
https://security.gentoo.org/glsa/202006-15

Third Party Advisory

CVEs referencing this url
https://lists.debian.org/debian-lts-announce/2020/05/msg00015.html

Mailing List;Third Party Advisory
https://gitlab.com/openconnect/openconnect/-/merge_requests/108

Patch;Third Party Advisory

Products affected by CVE-2020-12823

Debian » Debian Linux » Version: 8.0
cpe:2.3:o:debian:debian_linux:8.0:*:*:*:*:*:*:*
Matching versions
Fedoraproject » Fedora » Version: 31
cpe:2.3:o:fedoraproject:fedora:31:*:*:*:*:*:*:*
Matching versions
Fedoraproject » Fedora » Version: 32
cpe:2.3:o:fedoraproject:fedora:32:*:*:*:*:*:*:*
Matching versions
Fedoraproject » Fedora » Version: 30
cpe:2.3:o:fedoraproject:fedora:30:*:*:*:*:*:*:*
Matching versions
Opensuse » Leap » Version: 15.1
cpe:2.3:o:opensuse:leap:15.1:*:*:*:*:*:*:*
Matching versions
Opensuse » Leap » Version: 15.2
cpe:2.3:o:opensuse:leap:15.2:*:*:*:*:*:*:*
Matching versions
Infradead » Openconnect » Version: 8.09
cpe:2.3:a:infradead:openconnect:8.09:*:*:*:*:*:*:*
Matching versions