Vulnerabilities > CVE-2020-14929

CVSS 7.5 - HIGH

Attack vector

NETWORK

Attack complexity

LOW

Privileges required

NONE

Confidentiality impact

HIGH

Integrity impact

NONE

Availability impact

NONE

network

low complexity

alpine-project

fedoraproject

debian

NVD

Published: 2020-06-19

Updated: 2024-11-21

Summary

Alpine before 2.23 silently proceeds to use an insecure connection after a /tls is sent in certain circumstances involving PREAUTH, which is a less secure behavior than the alternative of closing the connection and letting the user decide what they would like to do.

Vulnerable Configurations

Part	Description	Count
Application	Alpine_Project Alpine Project Alpine 2.10.999999 Alpine Project Alpine 2.11.6 Alpine Project Alpine 2.11.8 Alpine Project Alpine 2.19.1 Alpine Project Alpine 2.19.2 Alpine Project Alpine 2.19.3 Alpine Project Alpine 2.19.5 Alpine Project Alpine 2.19.6 Alpine Project Alpine 2.19.8 Alpine Project Alpine 2.19.9 Alpine Project Alpine 2.19.11 Alpine Project Alpine 2.19.12 Alpine Project Alpine 2.19.99 Alpine Project Alpine 2.19.991 Alpine Project Alpine 2.19.999 Alpine Project Alpine 2.19.9991 Alpine Project Alpine 2.19.9992 Alpine Project Alpine 2.19.9993 Alpine Project Alpine 2.19.9999 Alpine Project Alpine 2.20.1 Alpine Project Alpine 2.20.2 Alpine Project Alpine 2.20.3 Alpine Project Alpine 2.20.4 Alpine Project Alpine 2.20.5 Alpine Project Alpine 2.20.6 Alpine Project Alpine 2.20.7 Alpine Project Alpine 2.20.8 Alpine Project Alpine 2.20.9 Alpine Project Alpine 2.20.10 Alpine Project Alpine 2.20.11 Alpine Project Alpine 2.20.12 Alpine Project Alpine 2.20.13 Alpine Project Alpine 2.20.14 Alpine Project Alpine 2.20.15 Alpine Project Alpine 2.20.16 Alpine Project Alpine 2.20.17 Alpine Project Alpine 2.20.99 Alpine Project Alpine 2.20.999 Alpine Project Alpine 2.21 Alpine Project Alpine 2.21.1 Alpine Project Alpine 2.21.9 Alpine Project Alpine 2.21.99 Alpine Project Alpine 2.21.999 Alpine Project Alpine 2.21.9999 Alpine Project Alpine 2.21.99999 Alpine Project Alpine 2.22 Alpine Project Alpine 2.22.1	47
OS	Fedoraproject Fedoraproject Fedora 31 Fedoraproject Fedora 32	2
OS	Debian Debian Debian Linux 8.0	1

Vulnerabilities > CVE-2020-14929 {"@context":"https://schema.org","@type":"BreadcrumbList","itemListElement":[{"@type":"ListItem","position":1,"name":"Vulnerabilities","item":"https://cyber.vumetric.com/vulns/"},{"@type":"ListItem","position":2,"name":"CVE-2020-14929"}]}

Summary

Vulnerable Configurations

References

Vulnerabilities > CVE-2020-14929