Описание
libinfinity before 0.6.6-1 does not validate expired SSL certificates, which allows remote attackers to have unspecified impact via unknown vectors.
Пакеты
| Пакет | Статус | Версия исправления | Релиз | Тип |
|---|---|---|---|---|
| libinfinity | fixed | 0.6.6-1 | package | |
| libinfinity | fixed | 0.6.6-1~deb8u1 | jessie | package |
| libinfinity | not-affected | wheezy | package | |
| libinfinity | not-affected | squeeze | package |
Примечания
https://github.com/gobby/libinfinity/commit/c97f870f5ae13112988d9f8ad464b4f679903706
https://github.com/gobby/gobby/issues/61
https://www.openwall.com/lists/oss-security/2015/05/12/1
EPSS
Связанные уязвимости
libinfinity before 0.6.6-1 does not validate expired SSL certificates, which allows remote attackers to have unspecified impact via unknown vectors.
libinfinity before 0.6.6-1 does not validate expired SSL certificates, which allows remote attackers to have unspecified impact via unknown vectors.
libinfinity before 0.6.6-1 does not validate expired SSL certificates, which allows remote attackers to have unspecified impact via unknown vectors.
EPSS