CVE-2020-14929

Katalog CVE

CVSS 7.5 · High EPSS 1,8%

Kerentanan pada alpine project alpine, fedoraproject fedora +1 lainnya. Skor CVSS 3.1 7.5 (High) menurut NVD.

Deskripsi (NVD)

Alpine before 2.23 silently proceeds to use an insecure connection after a /tls is sent in certain circumstances involving PREAUTH, which is a less secure behavior than the alternative of closing the connection and letting the user decide what they would like to do.

Rincian

Terbit di NVD

19 Juni 2020

Terakhir diubah

17 Juni 2026

Status NVD

Modified

CVSS 3.1

7.5 (High), sumber NVD
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N · uraikan di kalkulator

EPSS (30 hari)

1,8% peluang dieksploitasi; lebih tinggi dari 78,2% CVE lain

Produk dan versi terdampak

> Data dari konfigurasi CPE di NVD.

Referensi dan perbaikan

• http://mailman13.u.washington.edu/pipermail/alpine-info/2020-June/008989.html patch · advisory pihak ketiga
• https://lists.debian.org/debian-lts-announce/2020/06/msg00025.html mailing list · advisory pihak ketiga
• https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/YFXQGKZZMP3VS...
• https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/ZJLY6JDVGDNAJ...