process_http_response in OpenConnect before 8.05 has a...
High severity
Unreviewed
Published
May 24, 2022
to the GitHub Advisory Database
•
Updated Mar 29, 2023
Description
Published by the National Vulnerability Database
Sep 17, 2019
Published to the GitHub Advisory Database
May 24, 2022
Last updated
Mar 29, 2023
process_http_response in OpenConnect before 8.05 has a Buffer Overflow when a malicious server uses HTTP chunked encoding with crafted chunk sizes.
References