CVE-2019-15522
An issue was discovered in LINBIT csync2 through 2.0. csync_daemon_ses ...
Sévérité par source
Le label propre à Trivy est CRITICAL. Critique selon NVD. Plus basse selon Ubuntu (moyenne).
Description
An issue was discovered in LINBIT csync2 through 2.0. csync_daemon_session in daemon.c neglects to force a failure of a hello command when the configuration requires use of SSL.
Paquets affectés et versions corrigées
| Source | Paquet | Corrigé en |
|---|---|---|
| alpine 3.14 | csync2 | 2.0-r3 |
| alpine 3.15 | csync2 | 2.0-r3 |
| alpine 3.16 | csync2 | 2.0-r3 |
| alpine 3.17 | csync2 | 2.0-r3 |
| alpine 3.18 | csync2 | 2.0-r3 |
| alpine 3.19 | csync2 | 2.0-r3 |
| alpine 3.20 | csync2 | 2.0-r3 |
| alpine 3.21 | csync2 | 2.0-r3 |
| alpine 3.22 | csync2 | 2.0-r3 |
| alpine 3.23 | csync2 | 2.0-r3 |
| alpine 3.24 | csync2 | 2.0-r3 |
| alpine edge | csync2 | 2.0-r3 |
Afficher les 22 entrées de 22 sources
| Source | Paquet | Corrigé en |
|---|---|---|
| alpine 3.14 | csync2 | 2.0-r3 |
| alpine 3.15 | csync2 | 2.0-r3 |
| alpine 3.16 | csync2 | 2.0-r3 |
| alpine 3.17 | csync2 | 2.0-r3 |
| alpine 3.18 | csync2 | 2.0-r3 |
| alpine 3.19 | csync2 | 2.0-r3 |
| alpine 3.20 | csync2 | 2.0-r3 |
| alpine 3.21 | csync2 | 2.0-r3 |
| alpine 3.22 | csync2 | 2.0-r3 |
| alpine 3.23 | csync2 | 2.0-r3 |
| alpine 3.24 | csync2 | 2.0-r3 |
| alpine edge | csync2 | 2.0-r3 |
| debian 10 | csync2 | 2.0-22-gce67c55-1+deb10u1 |
| debian 11 | csync2 | 2.0-25-gc0faaf9-1 |
| debian 12 | csync2 | 2.0-25-gc0faaf9-1 |
| debian 13 | csync2 | 2.0-25-gc0faaf9-1 |
| debian 14 | csync2 | 2.0-25-gc0faaf9-1 |
| debian 8 | csync2 | pas de correctif indiqué |
| debian 9 | csync2 | 2.0-8-g175a01c-4+deb9u1 |
| echo | csync2 | 2.0-25-gc0faaf9-1 |
| ubuntu 18.04-ESM | csync2 | pas de correctif indiqué |
| ubuntu 20.04-ESM | csync2 | pas de correctif indiqué |