Security Advisory
CVE-2009-5009
CVE vulnerability detail — eXtreme Datacenter Security Operations
Description
Double free vulnerability in OpenConnect before 1.40 might allow remote AnyConnect SSL VPN servers to cause a denial of service (application crash) or possibly have unspecified other impact via a crafted DTLS Cipher option during a reconnect operation.