suse · CVE-2019-16239

Quick triage

View at Official suse advisory, NVD, CVE.org · CVE detail

Freshness: upstream tracker timestamp is available; use API updated time as primary recency signal.

Tracker summary

CVE-2019-16239 severity moderate: SUSE including 24 source package names (libopenconnect5-9.12-2.1, openconnect-7.08-3.4.1, …), 60 product×package rows across 22 product lines (SUSE Linux Enterprise Desktop 12 SP4, SUSE Linux Enterprise Module for Open Buildservice Development Tools 15 SP2, … (22 product lines)): Fixed 60.

Description:

process_http_response in OpenConnect before 8.05 has a Buffer Overflow when a malicious server uses HTTP chunked encoding with crafted chunk sizes.