2 matches found
npm: Forge: TLS client crash when the server sends no certificate
npm: Forge: TLS client crash when the server sends no certificate vulnerability discovered by ? in WordPress npm node-forge versions = 1.4.0...
5.9CVSS5.8AI score0.00204EPSS
SaveExploits0References5Affected Software1
MGASA-2020-0379 Updated gnutls packages fix security vulnerability
An issue was discovered in GnuTLS before 3.6.15. A server can trigger a NULL pointer dereference in a TLS 1.3 client if a norenegotiation alert is sent with unexpected timing, and then an invalid second handshake occurs. The crash happens in the application's error handling path, where the...
7.5CVSS7.3AI score0.0383EPSS
SaveExploits1References4
20