Vulnetix
Try Vulnetix Request Demo
CVE-2018-21029 PUBLISHED CVSS 7.5 HIGH

systemd 239 through 245 accepts any certificate signed by a trusted certificate authority for DNS Over TLS. Server Name Indication (SNI) is not sent, and there is no hostname validation with the GnuTLS backend. NOTE: This has been disputed by the developer as not a vulnerability since hostname validation does not have anything to do with this issue (i.e. there is no hostname to be sent)

EPSS 1.56% · 81.4th percentile

Risk Scores

CVSS v2.0
7.5
EPSS Score
1.56%
81.4th percentile

Affected Products

VendorProductVersions
n/an/an/a
fedoraprojectfedora31
systemd_projectsystemd239

Timeline

References

Open in Interactive Console →