CVE-2009-5009 - Double free vulnerability in OpenConnect before 1.40 might allow remote AnyConnect SSL VPN servers to cause a denial of service (application crash) or possibly have unspecified other impact via a crafted DTLS Cipher option during a reconnect operation

Back Back to CVE browser

MEDIUM

Double free vulnerability in OpenConnect before 1.40 might allow remote AnyConnect SSL VPN servers to cause a denial of service (application crash) or possibly have unspecified other impact via a crafted DTLS Cipher option during a reconnect operation

Published Oct 12, 2010

5.0

MEDIUM

CVSS 2.0

EPSS 0.98%

Description

Double free vulnerability in OpenConnect before 1.40 might allow remote AnyConnect SSL VPN servers to cause a denial of service (application crash) or possibly have unspecified other impact via a crafted DTLS Cipher option during a reconnect operation.

Affected products

Remediation

No remediation recorded yet.

Weaknesses (1)

CWE-399

References (1)

http://www.infradead.org/openconnect.html
x_refsource_CONFIRM

Link	Providers	Tags
http://www.infradead.org/openconnect.html		x_refsource_CONFIRM

Change history (0)

No recorded changes yet.

Sources

CVE.org / MITRE

Status PUBLISHED

Assigner mitre

Published Oct 12, 2010

Updated Sep 17, 2024

Reserved Oct 12, 2010

Link CVE-2009-5009

CISA Vulnrichment

Updated n/a

NVD

Status Modified

Modified Jun 16, 2026

Link CVE-2009-5009

Red Hat

Severity n/a

Public date n/a

Links CVE-2009-5009