Sign in
CVE-2009-5009
CVE-2009-5009
Description
Double free vulnerability in OpenConnect before 1.40 might allow remote AnyConnect SSL VPN servers to cause a denial of service (application crash) or possibly have unspecified other impact via a crafted DTLS Cipher option during a reconnect operation.
Impact
CVSS v2 : 5 MEDIUM
Type
CWE-399
Attack Vector
CVSSv2 Vector : AV:N/AC:L/Au:N/C:N/I:N/A:P
Quick links
CVE
,
NVD
,
CERT
,
Metasploit
,
Exploit-db
,
Fulldisc
,
Bugtraq
,
Microsoft
,
Red Hat
,
Debian
, GitHub
code
/
issues
,
Google
References
http://www.infradead.org/openconnect.html
FAQ
Terms of service
Privacy policy