CVE:CVE-2020-12823
CNNVD:CNNVD-202005-669
OpenConnect是一款用于连接虚拟专用网络的开源应用程序。
OpenConnect 8.09版本中存在缓冲区错误漏洞。攻击者可通过发送特制证书数据到gnutls.c文件中的get_cert_name利用该漏洞导致拒绝服务（应用程序崩溃）。
solution:Upgrade infradead openconnect to a higher version than 8.09,and avoid the version 8.09; Upgrade fedoraproject fedora to a higher version than 30,31,32,and avoid the version 30,31,32; Upgrade debian debian_linux to a higher version than 8.0,and avoid the version 8.0; Upgrade opensuse leap to a higher version than 15.1,15.2,and avoid the version 15.1,15.2