92 matches found
DEBIAN-CVE-2022-45197
Slixmpp before 1.8.3 lacks SSL Certificate hostname validation in XMLStream, allowing an attacker to pose as any server in the eyes of Slixmpp...
CVE-2022-45197
Slixmpp before 1.8.3 lacks SSL Certificate hostname validation in XMLStream, allowing an attacker to pose as any server in the eyes of Slixmpp...
CVE-2022-45197
Slixmpp before 1.8.3 lacks SSL Certificate hostname validation in XMLStream, allowing an attacker to pose as any server in the eyes of Slixmpp...
PYSEC-2022-43013
Slixmpp before 1.8.3 lacks SSL Certificate hostname validation in XMLStream, allowing an attacker to pose as any server in the eyes of Slixmpp...
Input validation
Slixmpp before 1.8.3 lacks SSL Certificate hostname validation in XMLStream, allowing an attacker to pose as any server in the eyes of Slixmpp...
PYSEC-2022-43013
Slixmpp before 1.8.3 lacks SSL Certificate hostname validation in XMLStream, allowing an attacker to pose as any server in the eyes of Slixmpp...
UBUNTU-CVE-2022-45197
Slixmpp before 1.8.3 lacks SSL Certificate hostname validation in XMLStream, allowing an attacker to pose as any server in the eyes of Slixmpp...
CVE-2022-45197
Slixmpp before 1.8.3 lacks SSL Certificate hostname validation in XMLStream, allowing an attacker to pose as any server in the eyes of Slixmpp...
CVE-2022-45197
Slixmpp before 1.8.3 lacks SSL Certificate hostname validation in XMLStream, allowing an attacker to pose as any server in the eyes of Slixmpp...
Slixmpp -- Lack of SSL Certificate hostname validation in XMLStream
NIST reports: Slixmpp before 1.8.3 lacks SSL Certificate hostname validation in XMLStream, allowing an attacker to pose as any server in the eyes of Slixmpp...
py-slixmpp -- incomplete SSL certificate validation
Slixmpp before 1.8.3 lacks SSL Certificate hostname validation in XMLStream, allowing an attacker to pose as any server in the eyes of Slixmpp...
CVE-2022-45197
Summary: CVE-2022-45197 affects Slixmpp prior to 1.8.3, which lacks hostname validation for SSL certificates in XMLStream, enabling an attacker to impersonate a server. This is a High-severity, network-based issue with no user interaction required. What’s affected: Slixmpp (Python XMPP library) b...
CVE-2022-45197
Slixmpp before 1.8.3 lacks SSL Certificate hostname validation in XMLStream, allowing an attacker to pose as any server in the eyes of Slixmpp...
Fedora 36 : python-slixmpp (2022-20a2dbdd45)
The remote Fedora 36 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2022-20a2dbdd45 advisory. Security fix for CVE-2022-45197 Tenable has extracted the preceding description block directly from the Fedora security advisory. Note that Nessus h...
Mageia: Security Advisory (MGASA-2022-0469)
The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Updated python-slixmpp packages fix security vulnerability
Fixes missing certificate hostname validation...
MGASA-2022-0469 Updated python-slixmpp packages fix security vulnerability
Fixes missing certificate hostname validation...
Security update for python-slixmpp (moderate)
openSUSE Security Update: Security update for python-slixmpp Announcement ID: openSUSE-SU-2022:10242-1 Rating: moderate References: 1205433 Cross-References: CVE-2022-45197 Affected Products: openSUSE Backports SLE-15-SP4 An update that fixes one vulnerability is now available. Description: This...
openSUSE 15 Security Update : python-slixmpp (openSUSE-SU-2022:10242-1)
The remote SUSE Linux SUSE15 host has a package installed that is affected by a vulnerability as referenced in the openSUSE-SU-2022:10242-1 advisory. - Slixmpp before 1.8.3 lacks SSL Certificate hostname validation in XMLStream, allowing an attacker to pose as any server in the eyes of Slixmpp...
openSUSE 15 Security Update : python-slixmpp (openSUSE-SU-2022:10241-1)
The remote SUSE Linux SUSE15 host has a package installed that is affected by a vulnerability as referenced in the openSUSE-SU-2022:10241-1 advisory. - Slixmpp before 1.8.3 lacks SSL Certificate hostname validation in XMLStream, allowing an attacker to pose as any server in the eyes of Slixmpp...