Debian/openfortivpn: critical 9.1
An issue was discovered in openfortivpn 1.11.0 when used with OpenSSL before 1.0.2. tunnel.c mishandles certificate validation because hostname comparisons do not consider '\0' characters, as demonstr
Action: Upgrade openfortivpn to 1.12.0-1 or later.
Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 1.12.0-1 | - |
Fixed versions
| 1.12.0-1 |
Sources
- osv: DEBIAN-CVE-2020-7043#Debian:13/openfortivpn
- https://security-tracker.debian.org/tracker/CVE-2020-7043
published · modified · JSON