CVE-2019-15522
An issue was discovered in LINBIT csync2 through 2.0. csync_daemon_ses ...
Einstufung nach Quelle
Trivys eigenes Label ist CRITICAL. Kritisch laut NVD. Niedriger laut Ubuntu (mittel).
Beschreibung
An issue was discovered in LINBIT csync2 through 2.0. csync_daemon_session in daemon.c neglects to force a failure of a hello command when the configuration requires use of SSL.
Betroffene Pakete und behobene Versionen
| Quelle | Paket | Behoben in |
|---|---|---|
| alpine 3.14 | csync2 | 2.0-r3 |
| alpine 3.15 | csync2 | 2.0-r3 |
| alpine 3.16 | csync2 | 2.0-r3 |
| alpine 3.17 | csync2 | 2.0-r3 |
| alpine 3.18 | csync2 | 2.0-r3 |
| alpine 3.19 | csync2 | 2.0-r3 |
| alpine 3.20 | csync2 | 2.0-r3 |
| alpine 3.21 | csync2 | 2.0-r3 |
| alpine 3.22 | csync2 | 2.0-r3 |
| alpine 3.23 | csync2 | 2.0-r3 |
| alpine 3.24 | csync2 | 2.0-r3 |
| alpine edge | csync2 | 2.0-r3 |
Alle 22 Einträge aus 22 Quellen zeigen
| Quelle | Paket | Behoben in |
|---|---|---|
| alpine 3.14 | csync2 | 2.0-r3 |
| alpine 3.15 | csync2 | 2.0-r3 |
| alpine 3.16 | csync2 | 2.0-r3 |
| alpine 3.17 | csync2 | 2.0-r3 |
| alpine 3.18 | csync2 | 2.0-r3 |
| alpine 3.19 | csync2 | 2.0-r3 |
| alpine 3.20 | csync2 | 2.0-r3 |
| alpine 3.21 | csync2 | 2.0-r3 |
| alpine 3.22 | csync2 | 2.0-r3 |
| alpine 3.23 | csync2 | 2.0-r3 |
| alpine 3.24 | csync2 | 2.0-r3 |
| alpine edge | csync2 | 2.0-r3 |
| debian 10 | csync2 | 2.0-22-gce67c55-1+deb10u1 |
| debian 11 | csync2 | 2.0-25-gc0faaf9-1 |
| debian 12 | csync2 | 2.0-25-gc0faaf9-1 |
| debian 13 | csync2 | 2.0-25-gc0faaf9-1 |
| debian 14 | csync2 | 2.0-25-gc0faaf9-1 |
| debian 8 | csync2 | kein Fix angegeben |
| debian 9 | csync2 | 2.0-8-g175a01c-4+deb9u1 |
| echo | csync2 | 2.0-25-gc0faaf9-1 |
| ubuntu 18.04-ESM | csync2 | kein Fix angegeben |
| ubuntu 20.04-ESM | csync2 | kein Fix angegeben |