Debian/openfortivpn: medium 5.3
An issue was discovered in openfortivpn 1.11.0 when used with OpenSSL 1.0.2 or later. tunnel.c mishandles certificate validation because the hostname check operates on uninitialized memory. The outcom
Action: Upgrade openfortivpn to 1.12.0-1 or later.
Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 1.12.0-1 | - |
Fixed versions
| 1.12.0-1 |
Sources
- osv: DEBIAN-CVE-2020-7042#Debian:13/openfortivpn
- https://security-tracker.debian.org/tracker/CVE-2020-7042
published · modified · JSON