← All advisories

Critical severity9.8NVD Advisory· Published Sep 17, 2019· Updated Jun 17, 2026

CVE-2019-16239

CVE-2019-16239

Description

process_http_response in OpenConnect before 8.05 has a Buffer Overflow when a malicious server uses HTTP chunked encoding with crafted chunk sizes.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

9

OpenConnect/OpenConnectdescription
Infradead/Openconnectllm-fuzzy
Range: <8.05
osv-coords7 versions
pkg:rpm/opensuse/openconnect&distro=openSUSE%20Leap%2015.0 pkg:rpm/opensuse/openconnect&distro=openSUSE%20Leap%2015.1 pkg:rpm/suse/openconnect&distro=SUSE%20Linux%20Enterprise%20Desktop%2012%20SP4 pkg:rpm/suse/openconnect&distro=SUSE%20Linux%20Enterprise%20Workstation%20Extension%2012%20SP4 pkg:rpm/suse/openconnect&distro=SUSE%20Linux%20Enterprise%20Workstation%20Extension%2012%20SP5 pkg:rpm/suse/openconnect&distro=SUSE%20Linux%20Enterprise%20Workstation%20Extension%2015 pkg:rpm/suse/openconnect&distro=SUSE%20Linux%20Enterprise%20Workstation%20Extension%2015%20SP1
< 7.08-lp150.5.3.1+ 6 more
- (no CPE)range: < 7.08-lp150.5.3.1
- (no CPE)range: < 7.08-lp151.6.3.1
- (no CPE)range: < 7.08-3.4.1
- (no CPE)range: < 7.08-3.4.1
- (no CPE)range: < 7.08-3.4.1
- (no CPE)range: < 7.08-6.3.1
- (no CPE)range: < 7.08-6.3.1

Patches

Vulnerability mechanics

References

11

lists.opensuse.org/opensuse-security-announce/2019-10/msg00060.htmlnvdMailing ListThird Party Advisory
lists.opensuse.org/opensuse-security-announce/2019-10/msg00061.htmlnvdMailing ListThird Party Advisory
lists.debian.org/debian-lts-announce/2019/10/msg00003.htmlnvdMailing ListThird Party Advisory
seclists.org/bugtraq/2020/Jan/31nvdMailing ListThird Party Advisory
usn.ubuntu.com/4565-1/nvdThird Party Advisory
www.debian.org/security/2020/dsa-4607nvdThird Party Advisory
lists.infradead.org/pipermail/openconnect-devel/2019-September/005412.htmlnvdBroken Link
t2.fi/schedule/2019/nvdNot Applicable
lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/FX56KYWC7X4ETV4P6HGJC7GZUEBITBBS/nvd
lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/HDMZGNBLZZKAGBI2PNXYWWKLD2LXKFH6/nvd
lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/WI7ZENFAWCHF2RU4NHPL2CU4WGZ4BNDJ/nvd

News mentions

0

No linked articles in our index yet.