CVE-2020-12823

Name of the Vulnerable Software and Affected Versions: OpenConnect version 8.09

Description: The issue is related to a buffer overflow error in the get cert name function in gnutls.c, which can be exploited by a remote attacker. This exploitation can lead to a denial of service, causing the application to crash, or possibly other unspecified impacts. The vulnerability is triggered by crafted certificate data.

Recommendations: For OpenConnect version 8.09, consider disabling the get cert name function in gnutls.c as a temporary workaround to prevent potential exploitation until a patch is available. Restrict access to crafted certificate data to minimize the risk of triggering the buffer overflow. At the moment, there is no information about a newer version that contains a fix for this vulnerability.