VDB
GCVE-VVD-MAGEIA-2014-551
GCVE-VVD-MAGEIA-2014-551
Advisory Published
Updated not-yet-commons-ssl packages fixes security vulnerability:
It was discovered that the implementation used by the Not Yet Commons SSL
project to check that the server hostname matches the domain name in the
subject's CN field was flawed. This can be exploited by a Man-in-the-middle
(MITM) attack, where the attacker can spoof a valid certificate using a
specially crafted subject (CVE-2014-3604).
Affected Products
| Vendor | Product | Versions | Platforms |
|---|---|---|---|
| Mageia | not-yet-commons-ssl | 0 (affected), 0.3.15-1.mga4 (unaffected) | — |
Browse GCVE Records
100 records in the GCVE database · Updated April 16, 2026
No matching records found.
Explore Further
Investigate this vulnerability in the interactive console or download the raw GCVE record.