Launchpad.net

CVE 2019-16239

process_http_response in OpenConnect before 8.05 has a Buffer Overflow when a malicious server uses HTTP chunked encoding with crafted chunk sizes.

CVE-2019-16239 (Candidate) is related to these bugs:

Bug #1845248: Security fixes and bugs from latest stable release requested

Summary				In	Importance	Status
	1845248	Security fixes and bugs from latest stable release requested		openconnect (Ubuntu)	Undecided	Fix Released
	1845248	Security fixes and bugs from latest stable release requested		openconnect (Debian)	Unknown	Fix Released

See the

CVE page on Mitre.org for more details.