Lucene search
K

CVE-2021-40829 TLS hostname validation issues within AWS IoT Device SDKs on macOS

🗓️ 22 Nov 2021 23:41:17Reported by F-SecureUSType 
cvelist
 cvelist
🔗 www.cve.org👁 13 Views

AWS IoT Device SDKs TLS hostname validation issue on macO

Related
Affected
Refs
ReporterTitlePublishedViews
Family
Circl
CVE-2021-40829
23 Nov 202102:20
circl
CNNVD
Amazon AWS IoT Device SDK 信任管理问题漏洞
23 Nov 202100:00
cnnvd
CVE
CVE-2021-40829
22 Nov 202123:41
cve
EUVD
EUVD-2021-0029
7 Oct 202500:30
euvd
Github Security Blog
Improper certificate management in AWS IoT Device SDK v2
24 Nov 202121:11
github
GitLab Advisory Database
Improper Certificate Validation
23 Nov 202100:00
gitlab
NVD
CVE-2021-40829
23 Nov 202100:15
nvd
OSV
GHSA-743R-5G92-5VGF Improper certificate management in AWS IoT Device SDK v2
24 Nov 202121:11
osv
OSV
PYSEC-2021-862
23 Nov 202100:15
osv
Prion
Code injection
23 Nov 202100:15
prion
Rows per page
[
  {
    "platforms": [
      "macOS"
    ],
    "product": "AWS IoT Device SDK v2 for Java",
    "vendor": "Amazon Web Services",
    "versions": [
      {
        "lessThan": "1.4.2",
        "status": "affected",
        "version": "unspecified",
        "versionType": "custom"
      }
    ]
  },
  {
    "platforms": [
      "macOS"
    ],
    "product": "AWS IoT Device SDK v2 for Python",
    "vendor": "Amazon Web Services",
    "versions": [
      {
        "lessThan": "1.6.1",
        "status": "affected",
        "version": "unspecified",
        "versionType": "custom"
      }
    ]
  },
  {
    "platforms": [
      "macOS"
    ],
    "product": "AWS IoT Device SDK v2 for C++",
    "vendor": "Amazon Web Services",
    "versions": [
      {
        "lessThan": "1.12.7",
        "status": "affected",
        "version": "unspecified",
        "versionType": "custom"
      }
    ]
  },
  {
    "platforms": [
      "macOS"
    ],
    "product": "AWS IoT Device SDK v2 for Node.js",
    "vendor": "Amazon Web Services",
    "versions": [
      {
        "lessThan": "1.5.3",
        "status": "affected",
        "version": "unspecified",
        "versionType": "custom"
      }
    ]
  },
  {
    "platforms": [
      "macOS"
    ],
    "product": "AWS-C-IO",
    "vendor": "Amazon Web Services",
    "versions": [
      {
        "lessThan": "0.10.4",
        "status": "affected",
        "version": "unspecified",
        "versionType": "custom"
      }
    ]
  }
]

Data

Build on a solid foundation with Vulners data

We provide the essential building blocks for cybersecurity solutions with comprehensive, structured, and constantly updated vulnerability and exploits data

Api

Power your application with Vulners API

The Vulners REST API offers reliable, high-performance access to vulnerability intelligence, with 99.9% SLA uptime and CDN-backed data delivery for seamless global access

App

Assess and manage vulnerabilities with Vulners tools

Built on top of Vulners' database and SDK, end-user solutions give security professionals and developers lightweight and powerful tools for vulnerability remediation

22 Nov 2021 23:41Current
8.9High risk
Vulners AI Score8.9
CVSS 3.16.3
EPSS0.00375
13