VDB

CVE-2020-6750

CVE-2020-6750 REJECTED CVSS 5.900000095367432 MEDIUM

GSocketClient in GNOME GLib through 2.62.4 may occasionally connect directly to a target address instead of connecting via a proxy server when configured to do so, because the proxy_addr field is mishandled. This bug is timing-dependent and may occur only sporadically depending on network delays. The greatest security relevance is in use cases where a proxy is used to help with privacy/anonymity, even though there is no technical barrier to a direct connection. NOTE: versions before 2.60 are unaffected.

EPSS 2.20% · 81.8th percentile

Risk Scores

CVSS 3.1
5.900000095367432
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N
EPSS Score
2.20%
81.8th percentile

Affected Products

VendorProductVersions
Ubuntu:20.04:LTSglib2.00, 2.62.1-1, 2.63.1-2
Ubuntu:16.04:LTSglib2.00, 2.46.1-1, 2.47.1-1
Ubuntu:18.04:LTSglib2.02.54.1-1ubuntu1, 0, 2.55.2-2ubuntu1

Timeline

  • Jan 9, 2020 CVE Published
  • Apr 14, 2021 EPSS Score
  • Jun 23, 2021 EPSS Score
  • Jul 21, 2021 CVE Updated
  • Aug 25, 2021 EPSS Score
  • Dec 29, 2021 EPSS Score
  • Jan 6, 2022 EPSS Score
  • Feb 4, 2022 EPSS Score
  • Mar 2, 2022 EPSS Score
  • May 4, 2022 EPSS Score
  • Jul 6, 2022 EPSS Score
  • Sep 8, 2022 EPSS Score

References

Open in Interactive Console →
$ Console Community · 100/wk Open console ›