Lucene search
K

18 matches found

Tenable Nessus
Tenable Nessus
added 2024/06/03 12:0 a.m.18 views

RHEL 7 : glib-networking (Unpatched Vulnerability)

The remote Redhat Enterprise Linux 7 host has one or more packages installed that are affected by a vulnerability that has been acknowledged by the vendor but will not be patched. - glib-networking: GTlsClientConnection silently ignores unset server identity CVE-2020-13645 Note that Nessus has no...

6.5CVSS6.9AI score0.0046EPSS
Exploits1References1
OpenVAS
OpenVAS
added 2022/01/28 12:0 a.m.21 views

Mageia: Security Advisory (MGASA-2020-0314)

The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

6.5CVSS6.8AI score0.0046EPSS
Exploits1References5
OpenVAS
OpenVAS
added 2021/08/09 12:0 a.m.17 views

Huawei EulerOS: Security Advisory for glib-networking (EulerOS-SA-2021-2270)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

6.5CVSS6.8AI score0.0046EPSS
Exploits1References2
OpenVAS
OpenVAS
added 2021/08/09 12:0 a.m.18 views

Huawei EulerOS: Security Advisory for glib-networking (EulerOS-SA-2021-2244)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

6.5CVSS6.8AI score0.0046EPSS
Exploits1References2
Veracode
Veracode
added 2021/04/29 11:45 a.m.24 views

Man-in-the-middle (MITM)

In GNOME glib-networking is vulnerable to man-in-the-middle attack. GTlsClientConnection of the library skips hostname verification of the server's TLS certificate if the application fails to specify the expected server identity. This is in contrast to its intended documented behavior, to fail th...

6.5CVSS1.5AI score0.0046EPSS
Exploits1References14Affected Software1
Tenable Nessus
Tenable Nessus
added 2021/03/04 12:0 a.m.34 views

EulerOS Virtualization for ARM 64 3.0.6.0 : glib-networking (EulerOS-SA-2021-1583)

According to the version of the glib-networking package installed, the EulerOS Virtualization for ARM 64 installation on the remote host is affected by the following vulnerability : - In GNOME glib-networking through 2.64.2, the implementation of GTlsClientConnection skips hostname verification o...

6.5CVSS6.7AI score0.0046EPSS
Exploits1References2
OpenVAS
OpenVAS
added 2021/01/19 12:0 a.m.18 views

Huawei EulerOS: Security Advisory for glib-networking (EulerOS-SA-2021-1070)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

6.5CVSS6.8AI score0.0046EPSS
Exploits1References2
Tenable Nessus
Tenable Nessus
added 2020/11/06 12:0 a.m.31 views

EulerOS Virtualization 3.0.6.6 : glib-networking (EulerOS-SA-2020-2466)

According to the version of the glib-networking package installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerability : - In GNOME glib-networking through 2.64.2, the implementation of GTlsClientConnection skips hostname verification of the...

6.5CVSS6.7AI score0.0046EPSS
Exploits1References2
OpenVAS
OpenVAS
added 2020/11/04 12:0 a.m.20 views

Huawei EulerOS: Security Advisory for glib-networking (EulerOS-SA-2020-2346)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

6.5CVSS6.8AI score0.0046EPSS
Exploits1References2
Tenable Nessus
Tenable Nessus
added 2020/10/30 12:0 a.m.46 views

EulerOS 2.0 SP5 : glib-networking (EulerOS-SA-2020-2246)

According to the version of the glib-networking package installed, the EulerOS installation on the remote host is affected by the following vulnerability : - In GNOME glib-networking through 2.64.2, the implementation of GTlsClientConnection skips hostname verification of the server's TLS...

6.5CVSS6.9AI score0.0046EPSS
Exploits1References2
Gentoo Linux
Gentoo Linux
added 2020/07/27 12:0 a.m.43 views

GLib Networking: Improper certificate validation

Background Network-related giomodules for glib Description GTlsClientConnection skips hostname verification of the server’s TLS certificate if the application fails to specify the expected server identity. Impact There may be a breach of integrity or confidentiality in connections made using GLib...

6.5CVSS6.9AI score0.0046EPSS
Exploits1
RedhatCVE
RedhatCVE
added 2020/06/01 7:20 p.m.35 views

CVE-2020-13645

In GNOME glib-networking through 2.64.2, the implementation of GTlsClientConnection skips hostname verification of the server's TLS certificate if the application fails to specify the expected server identity. This is in contrast to its intended documented behavior, to fail the certificate...

6.4CVSS1.3AI score0.0046EPSS
Exploits1References3
OSV
OSV
added 2020/05/28 12:15 p.m.2 views

AZL-6440 CVE-2020-13645 affecting package glib-networking for versions less than 2.59.1-8

In GNOME glib-networking through 2.64.2, the implementation of GTlsClientConnection skips hostname verification of the server's TLS certificate if the application fails to specify the expected server identity. This is in contrast to its intended documented behavior, to fail the certificate...

6.5CVSS6.8AI score0.0046EPSS
Exploits1References1
OSV
OSV
added 2020/05/28 12:15 p.m.17 views

CVE-2020-13645

In GNOME glib-networking through 2.64.2, the implementation of GTlsClientConnection skips hostname verification of the server's TLS certificate if the application fails to specify the expected server identity. This is in contrast to its intended documented behavior, to fail the certificate...

6.5CVSS6.5AI score
Exploits0References8
NVD
NVD
added 2020/05/28 12:15 p.m.15 views

CVE-2020-13645

In GNOME glib-networking through 2.64.2, the implementation of GTlsClientConnection skips hostname verification of the server's TLS certificate if the application fails to specify the expected server identity. This is in contrast to its intended documented behavior, to fail the certificate...

6.5CVSS6.5AI score0.0046EPSS
Exploits1References8
UbuntuCve
UbuntuCve
added 2020/05/28 12:15 p.m.41 views

CVE-2020-13645

In GNOME glib-networking through 2.64.2, the implementation of GTlsClientConnection skips hostname verification of the server's TLS certificate if the application fails to specify the expected server identity. This is in contrast to its intended documented behavior, to fail the certificate...

6.5CVSS6.8AI score0.0046EPSS
Exploits1References2
Debian CVE
Debian CVE
added 2020/05/28 11:55 a.m.30 views

CVE-2020-13645

In GNOME glib-networking through 2.64.2, the implementation of GTlsClientConnection skips hostname verification of the server's TLS certificate if the application fails to specify the expected server identity. This is in contrast to its intended documented behavior, to fail the certificate...

6.5CVSS6.7AI score0.0046EPSS
Exploits1
AlpineLinux
AlpineLinux
added 2020/05/28 11:55 a.m.45 views

CVE-2020-13645

In GNOME glib-networking through 2.64.2, the implementation of GTlsClientConnection skips hostname verification of the server's TLS certificate if the application fails to specify the expected server identity. This is in contrast to its intended documented behavior, to fail the certificate...

6.5CVSS6.7AI score0.0046EPSS
Exploits1
Rows per page
Query Builder