Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

debian логотип

CVE-2019-15522

Опубликовано: 20 мар. 2020
Источник: debian
EPSS Низкий

Описание

An issue was discovered in LINBIT csync2 through 2.0. csync_daemon_session in daemon.c neglects to force a failure of a hello command when the configuration requires use of SSL.

Пакеты

ПакетСтатусВерсия исправленияРелизТип
csync2fixed2.0-25-gc0faaf9-1package
csync2fixed2.0-22-gce67c55-1+deb10u1busterpackage
csync2fixed2.0-8-g175a01c-4+deb9u1stretchpackage
csync2no-dsajessiepackage

Примечания

  • https://github.com/LINBIT/csync2/pull/13/commits/0ecfc333da51575f188dd7cf6ac4974d13a800b1

EPSS

Процентиль: 66%
0.00521
Низкий

Связанные уязвимости

CVSS3: 9.8
ubuntu
почти 6 лет назад

An issue was discovered in LINBIT csync2 through 2.0. csync_daemon_session in daemon.c neglects to force a failure of a hello command when the configuration requires use of SSL.

CVSS3: 9.8
nvd
почти 6 лет назад

An issue was discovered in LINBIT csync2 through 2.0. csync_daemon_session in daemon.c neglects to force a failure of a hello command when the configuration requires use of SSL.

suse-cvrf
больше 4 лет назад

Security update for csync2

github
больше 3 лет назад

An issue was discovered in LINBIT csync2 through 2.0. csync_daemon_session in daemon.c neglects to force a failure of a hello command when the configuration requires use of SSL.

suse-cvrf
больше 4 лет назад

Security update for csync2

EPSS

Процентиль: 66%
0.00521
Низкий