Lucene search
K

systemd 239 through 245 accepts any certificate signed by a trusted certificate authority for DNS Over TLS. Server Name Indication (SNI) is not sent and there is no hostname validation with the GnuTLS backend. NOTE: This has been disputed by the developer as not a vulnerability since hostname validation does not have anything to do with this issue (i.e. there is no hostname to be sent)

🗓️ 25 Sep 2020 07:00:00Reported by MicrosoftType 
mscve
 mscve
🔗 msrc.microsoft.com👁 2 Views

Systemd 239 to 245 trusts any CA signed certificate for domain name system over transport layer security; no SNI or hostname validation with the Gnutls backend.

Related
Detection
ReporterTitlePublishedViews
Family
CBLMariner
CVE-2018-21029 affecting package systemd 239-44
9 Sep 202006:09
cbl_mariner
Circl
CVE-2018-21029
1 Feb 202409:07
circl
CNVD
systemd Trust Management Issues Vulnerability (CNVD-2020-46821)
2 Dec 201900:00
cnvd
CVE
CVE-2018-21029
30 Oct 201921:46
cve
Cvelist
CVE-2018-21029
30 Oct 201921:46
cvelist
Debian CVE
CVE-2018-21029
30 Oct 201921:46
debiancve
Fedora
[SECURITY] Fedora 31 Update: systemd-243.4-1.fc31
21 Nov 201901:27
fedora
Tenable Nessus
Fedora 31 : systemd (2019-4c3ce3aa5c)
21 Nov 201900:00
nessus
NVD
CVE-2018-21029
30 Oct 201922:15
nvd
OpenVAS
Fedora Update for systemd FEDORA-2019-4c3ce3aa5c
9 Jan 202000:00
openvas
Rows per page
Vulners

Data

Build on a solid foundation with Vulners data

We provide the essential building blocks for cybersecurity solutions with comprehensive, structured, and constantly updated vulnerability and exploits data

Api

Power your application with Vulners API

The Vulners REST API offers reliable, high-performance access to vulnerability intelligence, with 99.9% SLA uptime and CDN-backed data delivery for seamless global access

App

Assess and manage vulnerabilities with Vulners tools

Built on top of Vulners' database and SDK, end-user solutions give security professionals and developers lightweight and powerful tools for vulnerability remediation

25 Sep 2020 07:00Current
8.9High risk
Vulners AI Score8.9
CVSS 27.5
CVSS 3.19.8
EPSS0.0156
2