MiracleLinux 8 : stunnel-5.56-5.el8 (AXSA:2021-1521:02)

The remote MiracleLinux 8 host has a package installed that is affected by a vulnerability as referenced in the AXSA:2021-1521:02 advisory. stunnel: client certificate not correctly verified when redirect and verifyChain options are used CVE-2021-20230 Tenable has extracted the preceding...

TencentOS Server 3: stunnel (TSSA-2022:0220)

The version of Tencent Linux installed on the remote TencentOS Server 3 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the TSSA-2022:0220 advisory. Package updates are available for TencentOS Server 3 that fix the following vulnerabilities:...

Alibaba Cloud Linux 3 : 0011: stunnel (ALINUX3-SA-2021:0011)

The remote Alibaba Cloud Linux 3 host has packages installed that are affected by a vulnerability as referenced in the ALINUX3-SA-2021:0011 advisory. Package updates are available for Alibaba Cloud Linux 3 that fix the following vulnerabilities: CVE-2021-20230: A flaw was found in stunnel before...

Ubuntu: Security Advisory (USN-6901-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Rocky Linux 8 : stunnel (RLSA-2021:0618)

The remote Rocky Linux 8 host has packages installed that are affected by a vulnerability as referenced in the RLSA-2021:0618 advisory. - A flaw was found in stunnel before 5.57, where it improperly validates client certificates when it is configured to use both redirect and verifyChain options...

CVE-2021-20230 affecting package stunnel for versions less than 5.70-1

CVE-2021-20230 affecting package stunnel for versions less than 5.70-1. An upgraded version of the package is available that resolves this issue...

AlmaLinux 8 : stunnel (ALSA-2021:0618)

The remote AlmaLinux 8 host has a package installed that is affected by a vulnerability as referenced in the ALSA-2021:0618 advisory. - A flaw was found in stunnel before 5.57, where it improperly validates client certificates when it is configured to use both redirect and verifyChain options. Th...

Advisory ROSA-SA-2021-1978

Software: stunnel 4.56 OS: Cobalt 7.9 CVE-ID: CVE-2014-0016 CVE-Crit: MEDIUM CVE-DESC: stunnel before 5.00 when using fork streaming does not properly update the OpenSSL pseudo-random number generator PRNG state, which causes subsequent children with the same process ID to use the same entropy po...

Updated tunnel packages fix security vulnerability

Updated stunnel package fixes security vulnerability: Client certificate not correctly verified when redirect and verifyChain options are used CVE-2021-20230...

SUSE: Security Advisory (SUSE-SU-2021:0772-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

SUSE: Security Advisory (SUSE-SU-2021:1465-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

GLSA-202105-02 : stunnel: Improper certificate validation

The remote host is affected by the vulnerability described in GLSA-202105-02 stunnel: Improper certificate validation It was discovered that stunnel did not correctly verified the client certificate when options redirect and verifyChain are used. Impact : A remote attacker could send a specially...

Huawei EulerOS: Security Advisory for stunnel (EulerOS-SA-2021-1889)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

RHEL 8 : stunnel (RHSA-2021:0619)

The remote Redhat Enterprise Linux 8 host has a package installed that is affected by a vulnerability as referenced in the RHSA-2021:0619 advisory. Stunnel is a wrapper for network connections. It can be used to tunnel an unencrypted network connection over an encrypted connection encrypted using...

RHEL 8 : stunnel (RHSA-2021:0618)

The remote Redhat Enterprise Linux 8 host has a package installed that is affected by a vulnerability as referenced in the RHSA-2021:0618 advisory. Stunnel is a wrapper for network connections. It can be used to tunnel an unencrypted network connection over an encrypted connection encrypted using...

SUSE SLES15 Security Update : stunnel (SUSE-SU-2021:1465-1)

This update for stunnel fixes the following issues : Security fix: bsc1177580, bsc1182529, CVE-2021-20230 - 'redirect' option does not properly handle 'verifyChain = yes' Note that Tenable Network Security has extracted the preceding description block directly from the SUSE security advisory...

SUSE-SU-2021:1465-1 Security update for stunnel

This update for stunnel fixes the following issues: - Security fix: bsc1177580, bsc1182529, CVE-2021-20230 'redirect' option does not properly handle 'verifyChain = yes'...

openSUSE Security Update : stunnel (openSUSE-2021-409)

This update for stunnel fixes the following issues : - Security fix: bsc1177580, bsc1182529, CVE-2021-20230 - 'redirect' option does not properly handle 'verifyChain = yes' This update was imported from the SUSE:SLE-15-SP2:Update update project. C Tenable Network Security, Inc. The descriptive te...

SUSE SLES15 Security Update : stunnel (SUSE-SU-2021:0772-1)

This update for stunnel fixes the following issues : Security fix: bsc1177580, bsc1182529, CVE-2021-20230 - 'redirect' option does not properly handle 'verifyChain = yes' Note that Tenable Network Security has extracted the preceding description block directly from the SUSE security advisory...

SUSE-SU-2021:0772-1 Security update for stunnel

This update for stunnel fixes the following issues: - Security fix: bsc1177580, bsc1182529, CVE-2021-20230 'redirect' option does not properly handle 'verifyChain = yes'...