Cette page suit l'état du correctif pour Debian. La vulnérabilité elle-même est décrite sur la page CVE principale.
Voir CVE-2015-3886 →
DEBIAN-CVE-2015-3886
libinfinity before 0.6.6-1 does not validate expired SSL certificates, which allows remote attackers to have unspecified impact via unknown vectors.
Description d'origine
La description telle que publiée par la source (souvent en anglais).
libinfinity before 0.6.6-1 does not validate expired SSL certificates, which allows remote attackers to have unspecified impact via unknown vectors.
Source: OSV.dev (Open Source Vulnerabilities) OSV
Paquets affectés
Debian:12
libinfinity
[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.6.6-1"}]}]
Debian:13
libinfinity
[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.6.6-1"}]}]
Debian:14
libinfinity
[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.6.6-1"}]}]
Références
- advisory security-tracker.debian.org