Описание
OpenConnect through 8.08 mishandles negative return values from X509_check_ function calls, which might assist attackers in performing man-in-the-middle attacks.
Ссылки
- Mailing ListThird Party Advisory
- Third Party Advisory
- Third Party Advisory
- Mailing ListThird Party Advisory
- Third Party Advisory
- Third Party Advisory
Уязвимые конфигурации
Конфигурация 1Версия до 8.08 (включая)
cpe:2.3:a:infradead:openconnect:*:*:*:*:*:*:*:*
Конфигурация 2
cpe:2.3:o:opensuse:leap:15.1:*:*:*:*:*:*:*
EPSS
Процентиль: 38%
0.00171
Низкий
5.9 Medium
CVSS3
4.3 Medium
CVSS2
Дефекты
CWE-755
Связанные уязвимости
CVSS3: 5.9
ubuntu
почти 6 лет назад
OpenConnect through 8.08 mishandles negative return values from X509_check_ function calls, which might assist attackers in performing man-in-the-middle attacks.
CVSS3: 5.9
debian
почти 6 лет назад
OpenConnect through 8.08 mishandles negative return values from X509_c ...
EPSS
Процентиль: 38%
0.00171
Низкий
5.9 Medium
CVSS3
4.3 Medium
CVSS2
Дефекты
CWE-755