Описание
A flaw in the libcurl SASL negotiation for LDAP authentication allows an incomplete handshake sequence to be misinterpreted as a successful cryptographic verification. An attacker executing a Man-in-the-Middle (MITM) attack can inject a premature or shortcut response that bypasses complete peer validation.
| Релиз | Статус | Примечание |
|---|---|---|
| devel | released | 8.20.0-2ubuntu11 |
| esm-infra-legacy/trusty | not-affected | code not present |
| esm-infra-legacy/xenial | not-affected | code not present |
| esm-infra/bionic | not-affected | code not present |
| esm-infra/focal | not-affected | code not present |
| jammy | not-affected | code not present |
| noble | released | 8.5.0-2ubuntu10.15 |
| resolute | released | 8.18.0-1ubuntu2.7 |
| stonking | released | 8.20.0-2ubuntu11 |
| upstream | released | 8.22.0~rc2-1 |
Показывать по
EPSS
7.4 High
CVSS3
Связанные уязвимости
A flaw in the libcurl SASL negotiation for LDAP authentication allows an incomplete handshake sequence to be misinterpreted as a successful cryptographic verification. An attacker executing a Man-in-the-Middle (MITM) attack can inject a premature or shortcut response that bypasses complete peer validation.
A flaw in the libcurl SASL negotiation for LDAP authentication allows an incomplete handshake sequence to be misinterpreted as a successful cryptographic verification. An attacker executing a Man-in-the-Middle (MITM) attack can inject a premature or shortcut response that bypasses complete peer validation.
A flaw in the libcurl SASL negotiation for LDAP authentication allows ...
EPSS
7.4 High
CVSS3