6863 matches found
CVE-2016-10937
IMAPFilter through 2.6.12 does not validate the hostname in an SSL certificate...
UBUNTU-CVE-2016-10937
IMAPFilter through 2.6.12 does not validate the hostname in an SSL certificate...
CVE-2016-10937
IMAPFilter up to version 2.6.12 did not validate hostnames in SSL certificates, enabling potential MITM during TLS handshakes. Several connected advisories show the fix was released in version 2.6.16, adding proper SSL hostname validation (CVE-2016-10937). Affected releases across distros (openSU...
CVE-2016-10937
IMAPFilter through 2.6.12 does not validate the hostname in an SSL certificate...
CVE-2016-10937: Improper Certificate Validation
IMAPFilter through 2.6.12 does not validate the hostname in an SSL certificate...
curl: Incorrect IPv6 literal parsing leads to validated connection to unexpected https server.
Summary: The IPv6 ip address can be specified with square brackets like fe80::3. There can also be a zone id specified like fe80::3%15. A URL can specify its hostname with IPv6 literal, It seems that the parsing in curl library is not complete. For instance, it is possible for particular IPv6...
UBUNTU-CVE-2019-6473
An invalid hostname option can trigger an assertion failure in the Kea DHCPv4 server process kea-dhcp4, causing the server process to exit. Versions affected: 1.4.0 to 1.5.0, 1.6.0-beta1, and 1.6.0-beta2...
CVE-2019-6473
An invalid hostname option can trigger an assertion failure in the Kea DHCPv4 server process kea-dhcp4, causing the server process to exit. Versions affected: 1.4.0 to 1.5.0, 1.6.0-beta1, and 1.6.0-beta2...
DEBIAN-CVE-2019-13485
In Xymon through 4.3.28, a stack-based buffer overflow vulnerability exists in the history viewer component via a long hostname or service parameter to history.c...
Stack overflow
In Xymon through 4.3.28, a stack-based buffer overflow vulnerability exists in the history viewer component via a long hostname or service parameter to history.c...
UBUNTU-CVE-2019-13485
In Xymon through 4.3.28, a stack-based buffer overflow vulnerability exists in the history viewer component via a long hostname or service parameter to history.c...
CVE-2017-18588
An issue was discovered in the security-framework crate before 0.1.12 for Rust. Hostname verification for certificates does not occur if ClientBuilder uses custom root certificates...
CVE-2017-18588
An issue was discovered in the security-framework crate before 0.1.12 for Rust. Hostname verification for certificates does not occur if ClientBuilder uses custom root certificates...
Design/Logic Flaw
An issue was discovered in the security-framework crate before 0.1.12 for Rust. Hostname verification for certificates does not occur if ClientBuilder uses custom root certificates...
CVE-2017-18588
An issue was discovered in the security-framework crate before 0.1.12 for Rust. Hostname verification for certificates does not occur if ClientBuilder uses custom root certificates...
CVE-2017-18588
The CVE targets the Rust security-framework crate (before 0.1.12). When ClientBuilder uses custom root certificates, hostname verification for TLS certificates does not occur. The issue is caused by hostname validation not being performed in that scenario. A fix is available by upgrading to 0.1.1...
CVE-2017-18588
An issue was discovered in the security-framework crate before 0.1.12 for Rust. Hostname verification for certificates does not occur if ClientBuilder uses custom root certificates...
CVE-2017-18588
An issue was discovered in the security-framework crate before 0.1.12 for Rust. Hostname verification for certificates does not occur if ClientBuilder uses custom root certificates...
CVE-2016-10932
An issue was discovered in the hyper crate before 0.9.4 for Rust on Windows. There is an HTTPS man-in-the-middle vulnerability because hostname verification was omitted...
CVE-2016-10931
An issue was discovered in the openssl crate before 0.9.0 for Rust. There is an SSL/TLS man-in-the-middle vulnerability because certificate verification is off by default and there is no API for hostname verification...