Lucene search
+L

2 matches found

RedHat Linux
RedHat Linux
added 2021/11/09 6:32 p.m.7 views

grilo: missing TLS certificate verification

In GNOME grilo though 0.3.13, grl-net-wc.c does not enable TLS certificate verification on the SoupSessionAsync objects it creates, leaving users vulnerable to network MITM attacks. NOTE: this is similar to CVE-2016-20011...

5.9CVSS5.8AI score0.00866EPSS
SaveExploits0References4
OSV
OSV
added 2021/08/30 12:17 p.m.3 views

USN-5055-1 grilo vulnerability

Michael Catanzaro discovered that grilo incorrectly handled certain TLS certificate verification. An attacker could possibly use this issue to MITM attacks...

5.9CVSS6.2AI score0.00866EPSS
SaveExploits0References2
Rows per page
Query Builder