Cette page suit l'état du correctif pour Debian. La vulnérabilité elle-même est décrite sur la page CVE principale.
Voir CVE-2020-7041 →
DEBIAN-CVE-2020-7041
An issue was discovered in openfortivpn 1.11.0 when used with OpenSSL 1.0.2 or later. tunnel.c mishandles certificate validation because an X509_check...
Description d'origine
La description telle que publiée par la source (souvent en anglais).
An issue was discovered in openfortivpn 1.11.0 when used with OpenSSL 1.0.2 or later. tunnel.c mishandles certificate validation because an X509_check_host negative error code is interpreted as a successful return value.
Source: OSV.dev (Open Source Vulnerabilities) OSV
Paquets affectés
Debian:12
openfortivpn
[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.12.0-1"}]}]
Debian:13
openfortivpn
[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.12.0-1"}]}]
Debian:14
openfortivpn
[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.12.0-1"}]}]
Références
- advisory security-tracker.debian.org