CVE-2020-14154

Опубликовано: 15 июн. 2020

Источник: nvd

CVSS3: 4.8

CVSS2: 5.8

EPSS Низкий

Описание

Mutt before 1.14.3 proceeds with a connection even if, in response to a GnuTLS certificate prompt, the user rejects an expired intermediate certificate.

Ссылки

http://lists.mutt.org/pipermail/mutt-announce/Week-of-Mon-20200608/000022.html
Mailing List
Vendor Advisory
http://lists.opensuse.org/opensuse-security-announce/2020-06/msg00064.html
Broken Link
http://lists.opensuse.org/opensuse-security-announce/2020-06/msg00070.html
Broken Link
http://www.mutt.org
Product
Vendor Advisory
https://bugs.gentoo.org/728300
Third Party Advisory
https://security.gentoo.org/glsa/202007-57
Third Party Advisory
https://usn.ubuntu.com/4401-1/
Third Party Advisory
http://lists.mutt.org/pipermail/mutt-announce/Week-of-Mon-20200608/000022.html
Mailing List
Vendor Advisory
http://lists.opensuse.org/opensuse-security-announce/2020-06/msg00064.html
Broken Link
http://lists.opensuse.org/opensuse-security-announce/2020-06/msg00070.html
Broken Link
http://www.mutt.org
Product
Vendor Advisory
https://bugs.gentoo.org/728300
Third Party Advisory
https://security.gentoo.org/glsa/202007-57
Third Party Advisory
https://usn.ubuntu.com/4401-1/
Third Party Advisory

Уязвимые конфигурации

Конфигурация 1

cpe:2.3:a:mutt:mutt:*:*:*:*:*:*:*:*

Версия до 1.14.3 (исключая)

Конфигурация 2

Одно из

cpe:2.3:o:canonical:ubuntu_linux:12.04:*:*:*:-:*:*:*

cpe:2.3:o:canonical:ubuntu_linux:16.04:*:*:*:esm:*:*:*

cpe:2.3:o:canonical:ubuntu_linux:18.04:*:*:*:lts:*:*:*

cpe:2.3:o:canonical:ubuntu_linux:19.10:*:*:*:*:*:*:*

cpe:2.3:o:canonical:ubuntu_linux:20.04:*:*:*:lts:*:*:*

EPSS

Процентиль: 71%

0.00661

Низкий

4.8 Medium

CVSS3

5.8 Medium

CVSS2

Дефекты

NVD-CWE-Other

Связанные уязвимости

CVE-2020-14154

CVSS3: 4.8

ubuntu

больше 5 лет назад

Mutt before 1.14.3 proceeds with a connection even if, in response to a GnuTLS certificate prompt, the user rejects an expired intermediate certificate.

CVE-2020-14154

CVSS3: 4.8

redhat

больше 5 лет назад

Mutt before 1.14.3 proceeds with a connection even if, in response to a GnuTLS certificate prompt, the user rejects an expired intermediate certificate.

CVE-2020-14154

CVSS3: 4.8

debian

больше 5 лет назад

Mutt before 1.14.3 proceeds with a connection even if, in response to ...

GHSA-v3gg-5crq-w4vj

CVSS3: 4.8

github

больше 3 лет назад

Mutt before 1.14.3 proceeds with a connection even if, in response to a GnuTLS certificate prompt, the user rejects an expired intermediate certificate.

BDU:2020-03244

CVSS3: 4.8

fstec

больше 5 лет назад

Уязвимость почтового клиента Mutt, связанная с неправильным подтверждением подлинности сертификата, позволяющая нарушителю выполнить атаку типа «человек посередине»

EPSS

Процентиль: 71%

0.00661

Низкий

4.8 Medium

CVSS3

5.8 Medium

CVSS2

Дефекты

NVD-CWE-Other