2 matches found
CVE-2024-47619
CVE-2024-47619 — syslog-ng TLS wildcard bug Affected product: syslog-ng (log daemon). Prior to version 4.8.2, the tls_wildcard_match() function can erroneously match on certificates like foo..bar and accept partial wildcards such as foo.a c.bar, which glib matches but should be considered invalid...
7.5CVSS7.2AI score0.00354EPSS
SaveExploits1References5Affected Software1
curl: IDN wildcard match may lead to Improper Cerificate Validation
A flaw was found in the Curl package. An incorrect International Domain Name IDN wildcard match may lead to improper certificate validation...
5.9CVSS7.3AI score0.01806EPSS
SaveExploits1References5
20