VDB
GCVE-110-MAGEIA-2021-14
GCVE-110-MAGEIA-2021-14
Advisory Published
Alpine before 2.23 silently proceeds to use an insecure connection after a /tls
is sent in certain circumstances involving PREAUTH, which is a less secure
behavior than the alternative of closing the connection and letting the user
decide what they would like to do (CVE-2020-14929).
Affected Products
| Vendor | Product | Versions | Platforms |
|---|---|---|---|
| Mageia | virtualbox | 0 (affected), 6.1.18-1.mga7 (unaffected) | — |
| Mageia | c-client | 0 (affected), 2007f-13.1.mga7 (unaffected), 0 (affected), 2007f-13.1.mga7 (unaffected) | — |
| Mageia | alpine | 0 (affected), 2.11-5.1.mga7 (unaffected), 0 (affected), 2.11-5.1.mga7 (unaffected) | — |
| AWS | connect | — | — |
| Mageia | kmod-virtualbox | 0 (affected), 6.1.18-1.mga7 (unaffected) | — |
Aliases
References
Explore Further
Investigate this vulnerability in the interactive console or download the raw GCVE record.