Debian/stunnel4: unknown

The OCSP functionality in stunnel before 4.24 does not properly search certificate revocation lists (CRL), which allows remote attackers to bypass intended access restrictions by using revoked certifi

Action: Upgrade stunnel4 to 3:4.22-1.1 or later.

Affected

Fixed versions

Sources

• osv: DEBIAN-CVE-2008-2420#Debian:13/stunnel4
• https://security-tracker.debian.org/tracker/CVE-2008-2420

published 2008-05-23T15:32:00Z · modified 2026-10-23T17:47:45.653211052Z · JSON