CVE-2020-24661

2020-08-2616:15:00

Alpine Linux Development Team

security.alpinelinux.org

0.002 Low

EPSS

Percentile

56.2%

JSON

GNOME Geary before 3.36.3 mishandles pinned TLS certificate verification for IMAP and SMTP services using invalid TLS certificates (e.g., self-signed certificates) when the client system is not configured to use a system-provided PKCS#11 store. This allows a meddler in the middle to present a different invalid certificate to intercept incoming and outgoing mail.

OSVersionArchitecturePackageVersionFilename
Alpineedge-communitynoarchgeary< 3.37.91-r0UNKNOWN
Alpine3.12-communitynoarchgeary< 3.36.2-r1UNKNOWN
Alpine3.13-communitynoarchgeary< 3.37.91-r0UNKNOWN
Alpine3.14-communitynoarchgeary< 3.37.91-r0UNKNOWN
Alpine3.15-communitynoarchgeary< 3.37.91-r0UNKNOWN
Alpine3.16-communitynoarchgeary< 3.37.91-r0UNKNOWN
Alpine3.17-communitynoarchgeary< 3.37.91-r0UNKNOWN
Alpine3.18-communitynoarchgeary< 3.37.91-r0UNKNOWN
Alpine3.19-communitynoarchgeary< 3.37.91-r0UNKNOWN

OS	Version	Architecture	Package	Version	Filename
Alpine	edge-community	noarch	geary	< 3.37.91-r0	UNKNOWN
Alpine	3.12-community	noarch	geary	< 3.36.2-r1	UNKNOWN
Alpine	3.13-community	noarch	geary	< 3.37.91-r0	UNKNOWN
Alpine	3.14-community	noarch	geary	< 3.37.91-r0	UNKNOWN
Alpine	3.15-community	noarch	geary	< 3.37.91-r0	UNKNOWN
Alpine	3.16-community	noarch	geary	< 3.37.91-r0	UNKNOWN
Alpine	3.17-community	noarch	geary	< 3.37.91-r0	UNKNOWN
Alpine	3.18-community	noarch	geary	< 3.37.91-r0	UNKNOWN
Alpine	3.19-community	noarch	geary	< 3.37.91-r0	UNKNOWN

0.002 Low

EPSS

Percentile

56.2%

JSON

Related for ALPINE:CVE-2020-24661