CVE-2020-12105: Infradead Openconnect

Medium severity, CVSS 5.9. EPSS: 1.7% chance of exploitation in the next 30 days.

OpenConnect through 8.08 mishandles negative return values from X509_check_ function calls, which might assist attackers in performing man-in-the-middle attacks.

Affected products

• Infradead Openconnect: up to and including 8.08
• Opensuse Leap: version 15.1 only

Published 2020-04-23. Last modified 2026-06-17.