Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

debian логотип

CVE-2012-6709

Опубликовано: 23 фев. 2018
Источник: debian
EPSS Низкий

Описание

ELinks 0.12 and Twibright Links 2.3 have Missing SSL Certificate Validation.

Пакеты

ПакетСтатусВерсия исправленияРелизТип
elinksfixed0.13~20190125-1experimentalpackage
elinksfixed0.13~20190125-3package
elinksignoredstretchpackage
elinksignoredjessiepackage
elinksignoredwheezypackage
links2fixed2.6-1package

Примечания

  • Patch proposed upstream (when using): http://lists.linuxfromscratch.org/pipermail/elinks-dev/2015-June/002099.html

  • tested links2 against badssl.com, no apparent issue back in wheezy

  • src:links2/2.6-1 adds verify-ssl-certs-510417.diff to verify SSL certs.

  • src:links2 upstream in 2.11 adds support for verifying SSL certificates.

EPSS

Процентиль: 52%
0.0066
Низкий

Связанные уязвимости

CVSS3: 5.9
ubuntu
больше 8 лет назад

ELinks 0.12 and Twibright Links 2.3 have Missing SSL Certificate Validation.

redhat
почти 14 лет назад

ELinks 0.12 and Twibright Links 2.3 have Missing SSL Certificate Validation.

CVSS3: 5.9
nvd
больше 8 лет назад

ELinks 0.12 and Twibright Links 2.3 have Missing SSL Certificate Validation.

CVSS3: 5.9
github
больше 4 лет назад

ELinks 0.12 and Twibright Links 2.3 have Missing SSL Certificate Validation.

CVSS3: 5.9
altlinux
около 4 лет назад

ALT-PU-2022-2431: package `elinks` update to version 0.15.0-alt2

EPSS

Процентиль: 52%
0.0066
Низкий