Lucene search
+L

2 matches found

OSV
OSV
added 2021/07/12 8:26 p.m.9 views

MGASA-2021-0343 Updated libgrss packages fix security vulnerability

libgrss does not perform any TLS certificate verification because it uses the deprecated SoupSessionAsync, which requires manually enabling certificate verification, rather than a modern SoupSession that has good defaults CVE-2016-20011...

7.5CVSS7.4AI score0.01469EPSS
SaveExploits0References3
AlpineLinux
AlpineLinux
added 2021/05/25 8:9 p.m.40 views

CVE-2016-20011

libgrss through 0.7.0 fails to perform TLS certificate verification when downloading feeds, allowing remote attackers to manipulate the contents of feeds without detection. This occurs because of the default behavior of SoupSessionSync...

7.5CVSS6.7AI score0.01469EPSS
SaveExploits0
Rows per page
Query Builder