Описание
Roundcube Webmail through 1.3.9 mishandles Punycode xn-- domain names, leading to homograph attacks.
Пакеты
| Пакет | Статус | Версия исправления | Релиз | Тип |
|---|---|---|---|---|
| roundcube | fixed | 1.5~rc+dfsg.1-1 | experimental | package |
| roundcube | fixed | 1.5.0+dfsg.1-1 | package | |
| roundcube | ignored | bullseye | package | |
| roundcube | ignored | buster | package | |
| roundcube | no-dsa | stretch | package |
Примечания
https://github.com/roundcube/roundcubemail/issues/6891
EPSS
Процентиль: 64%
0.01031
Низкий
Связанные уязвимости
CVSS3: 7.4
ubuntu
около 7 лет назад
Roundcube Webmail through 1.3.9 mishandles Punycode xn-- domain names, leading to homograph attacks.
CVSS3: 7.4
nvd
около 7 лет назад
Roundcube Webmail through 1.3.9 mishandles Punycode xn-- domain names, leading to homograph attacks.
CVSS3: 7.4
github
больше 4 лет назад
Roundcube Webmail through 1.3.9 mishandles Punycode xn-- domain names, leading to homograph attacks.
CVSS3: 7.4
altlinux
около 7 лет назад
ALT-PU-2019-2818: package `roundcube` update to version 1.3.10-alt1
EPSS
Процентиль: 64%
0.01031
Низкий