Lucene search
Veracode Vulnerability DatabaseVERACODE:26185HistoryAug 06, 2020 - 9:35 p.m.
Insecure Connection
2020-08-0621:35:03
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
8
0.009 Low
EPSS
Percentile
83.2%
Alpine silently proceeds to use an insecure connection after a /tls is sent in certain circumstances involving PREAUTH, which is a less secure behavior than the alternative of closing the connection and letting the user decide what they would like to do.
| CPE | Name | Operator | Version |
|---|---|---|---|
| alpine:3.12 | eq | 2.22-r1 | |
| alpine:edge | eq | 2.22-r1 | |
| alpine:edge | eq | 2.22-r0 | |
| alpine:3.12 | eq | 2.22-r1 | |
| alpine:edge | eq | 2.22-r1 | |
| alpine:edge | eq | 2.22-r0 |
References
mailman13.u.washington.edu/pipermail/alpine-info/2020-June/008989.html
lists.debian.org/debian-lts-announce/2020/06/msg00025.html
lists.fedoraproject.org/archives/list/[email protected]/message/YFXQGKZZMP3VSTLZVO5Z7Z6USYIW37A6/
lists.fedoraproject.org/archives/list/[email protected]/message/ZJLY6JDVGDNAJZ3UQDWYWSDBWOAOXMNX/
Related
nessus
nessus
Debian DLA-2254-1 : alpine security update
2020-06-26 00:00:00
Fedora 31 : alpine (2020-f822ea9330)
2020-07-06 00:00:00
openSUSE Security Update : alpine (openSUSE-2021-675)
2021-05-18 00:00:00
fedora
fedora
[SECURITY] Fedora 31 Update: alpine-2.23-2.fc31
2020-07-03 01:38:00
[SECURITY] Fedora 32 Update: alpine-2.23-2.fc32
2020-07-03 01:19:21
prion
prion
Design/Logic Flaw
2020-06-19 19:15:00
nvd
nvd
CVE-2020-14929
2020-06-19 19:15:12
mageia
mageia
Updated alpine and c-client packages fix security vulnerability
2021-01-10 22:46:12
openvas
openvas
openSUSE: Security Advisory for alpine (openSUSE-SU-2021:0675-1)
2021-05-07 00:00:00
Fedora: Security Advisory for alpine (FEDORA-2020-f822ea9330)
2020-07-03 00:00:00
Mageia: Security Advisory (MGASA-2021-0014)
2022-01-28 00:00:00
cvelist
cvelist
CVE-2020-14929
2020-06-19 18:58:59
cve
cve
CVE-2020-14929
2020-06-19 19:15:12
alpinelinux
alpinelinux
CVE-2020-14929
2020-06-19 19:15:12
suse
suse
Security update for alpine (moderate)
2021-05-06 00:00:00
Security update for alpine (moderate)
2021-05-10 00:00:00
debiancve
debiancve
CVE-2020-14929
2020-06-19 19:15:12
ubuntucve
ubuntucve
CVE-2020-14929
2020-06-19 00:00:00
osv
osv
alpine - security update
2020-06-25 00:00:00
debian
debian
[SECURITY] [DLA 2254-1] alpine security update
2020-06-25 21:27:00