Lucene search
Redhat.comRH:CVE-2016-10027HistoryDec 23, 2016 - 7:47 a.m.
CVE-2016-10027
2016-12-2307:47:22
redhat.com
access.redhat.com
15
EPSS
0.002
Percentile
59.9%
Race condition in the XMPP library in Smack before 4.1.9, when the SecurityMode.required TLS setting has been set, allows man-in-the-middle attackers to bypass TLS protections and trigger use of cleartext for client authentication by stripping the “starttls” feature from a server response.
Related
cvelist
cvelist
CVE-2016-10027
2017-01-12 23:00:00
fedora
fedora
[SECURITY] Fedora 25 Update: smack-4.1.5-3.fc25
2016-12-29 07:20:35
prion
prion
Race condition
2017-01-12 23:59:00
osv
osv
CVE-2016-10027
2017-01-12 23:59:00
nvd
nvd
CVE-2016-10027
2017-01-12 23:59:00
veracode
veracode
Man In The Middle (MitM)
2016-12-21 03:54:53
nessus
nessus
Fedora 25 : smack (2016-897a1e6698)
2017-01-03 00:00:00
openvas
openvas
Fedora Update for smack FEDORA-2016-897a1e6698
2016-12-30 00:00:00
cve
cve
CVE-2016-10027
2017-01-12 23:59:00