QwikSec

Security Database

CVE

CWE

Training

CVE Database
/

CVE-2020-15953

Back to search

CVE-2020-15953

Published: Jul 27, 2020

Modified: Aug 4, 2024

PUBLISHED

Description

LibEtPan through 1.9.4, as used in MailCore 2 through 0.6.3 and other products, has a STARTTLS buffering issue that affects IMAP, SMTP, and POP3. When a server sends a "begin TLS" response, the client reads additional data (e.g., from a meddler-in-the-middle attacker) and evaluates it in a TLS context, aka "response injection."

VendorProductVersions

n/a

n/a

affected
n/a

References

GLSA-202007-55
vendor-advisory
x_refsource_GENTOO
FEDORA-2020-13ae5f7221
vendor-advisory
x_refsource_FEDORA
FEDORA-2020-44e52ef729
vendor-advisory
x_refsource_FEDORA
openSUSE-SU-2020:1454
vendor-advisory
x_refsource_SUSE
openSUSE-SU-2020:1505
vendor-advisory
x_refsource_SUSE

Security Training

Train your team to recognize and prevent security threats with our comprehensive security awareness program.

Start Training

Vulnerability Scanning

Discover vulnerabilities in your applications and infrastructure before attackers do.

Scan Now