ALPINE-CVE-2020-13614

An issue was discovered in ssl.c in Axel before 2.17.8. The TLS implementation lacks hostname verification...

CVE-2020-13614

An issue was discovered in ssl.c in Axel before 2.17.8. The TLS implementation lacks hostname verification...

CVE-2020-13615

lib/QoreSocket.cpp in Qore before 0.9.4.2 lacks hostname verification for X.509 certificates...

Information disclosure

An issue was discovered in ssl.c in Axel before 2.17.8. The TLS implementation lacks hostname verification...

Code injection

lib/QoreSocket.cpp in Qore before 0.9.4.2 lacks hostname verification for X.509 certificates...

Design/Logic Flaw

The boost ASIO wrapper in net/asio.cpp in Pichi before 1.3.0 lacks TLS hostname verification...

UBUNTU-CVE-2020-13614

An issue was discovered in ssl.c in Axel before 2.17.8. The TLS implementation lacks hostname verification...

CVE-2020-13614

An issue was discovered in ssl.c in Axel before 2.17.8. The TLS implementation lacks hostname verification...

CVE-2020-13614

An issue was discovered in ssl.c in Axel before 2.17.8. The TLS implementation lacks hostname verification...

CVE-2020-13614

Axel (SSL/TLS) vulnerability CVE-2020-13614 affects Axel before 2.17.8, where the TLS hostname verification is not performed in ssl.c. This could allow an attacker to impersonate a server and obtain sensitive information. Public sources in the connected documents indicate that updates addressing ...

CVE-2020-13614

An issue was discovered in ssl.c in Axel before 2.17.8. The TLS implementation lacks hostname verification...

CVE-2020-13614

An issue was discovered in ssl.c in Axel before 2.17.8. The TLS implementation lacks hostname verification...

CVE-2020-13615

lib/QoreSocket.cpp in Qore before 0.9.4.2 lacks hostname verification for X.509 certificates...

CVE-2020-13615

lib/QoreSocket.cpp in Qore before 0.9.4.2 lacks hostname verification for X.509 certificates...

CVE-2020-13615

CVE-2020-13615 affects Qore up to version 0.9.4.2; the root cause is missing hostname verification for X.509 certificates in lib/QoreSocket.cpp. This constitutes a trust-management vulnerability in TLS connections. Remediation/mitigation: upgrade to Qore 0.9.4.2 or later (as indicated by Red Hat/...

CVE-2020-13616

The boost ASIO wrapper in net/asio.cpp in Pichi before 1.3.0 lacks TLS hostname verification...

CVE-2020-13616

The boost ASIO wrapper in net/asio.cpp in Pichi before 1.3.0 lacks TLS hostname verification...

CVE-2020-13616

CVE-2020-13616 affects Pichi prior to 1.3.0: the boost ASIO wrapper in net/asio.cpp does not verify TLS hostnames, enabling hostname validation bypass over TLS. CVSS data from NVD indicates a Network attack vector with MEDIUM base impact for confidentiality (PARTIAL) and no integrity/availability...

Man-in-the-Middle (MitM)

Overview em-http-request is an EventMachine based, async HTTP Request client. Affected versions of this package are vulnerable to Man-in-the-Middle MitM. The library eventmachine is being used in an insecure way that allows an attacker to perform a man-in-the-middle attack against users of the...

PT-2020-13616

Name of the Vulnerable Software and Affected Versions Qore versions prior to 0.9.4.2 Description The issue is related to a lack of hostname verification for X.509 certificates in the lib/QoreSocket.cpp file. This could potentially allow for certain types of attacks. Recommendations For versions...