Vulnerability Details CVE-2020-13614
An issue was discovered in ssl.c in Axel before 2.17.8. The TLS implementation lacks hostname verification.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.006
EPSS Ranking 67.9%
CVSS Severity
CVSS v3 Score 5.9
CVSS v2 Score 4.3
References
- http://lists.opensuse.org/opensuse-security-announce/2020-06/msg00006.html
- http://lists.opensuse.org/opensuse-security-announce/2020-06/msg00010.html
- https://github.com/axel-download-accelerator/axel/issues/262
- https://github.com/axel-download-accelerator/axel/releases/tag/v2.17.8
- https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/LPZUQSDGV5XDBJGHBWBHWJIBE47Q4QIB/
- https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/S3ECAKIZA2TGBYLUQTLGRMXUFIOGRHG3/
- http://lists.opensuse.org/opensuse-security-announce/2020-06/msg00006.html
- http://lists.opensuse.org/opensuse-security-announce/2020-06/msg00010.html
- https://github.com/axel-download-accelerator/axel/issues/262
- https://github.com/axel-download-accelerator/axel/releases/tag/v2.17.8
- https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/LPZUQSDGV5XDBJGHBWBHWJIBE47Q4QIB/
- https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/S3ECAKIZA2TGBYLUQTLGRMXUFIOGRHG3/
Products affected by CVE-2020-13614
-
cpe:2.3:a:axel_project:axel:0.9
-
cpe:2.3:a:axel_project:axel:0.91
-
cpe:2.3:a:axel_project:axel:0.92
-
cpe:2.3:a:axel_project:axel:0.94
-
cpe:2.3:a:axel_project:axel:0.95
-
cpe:2.3:a:axel_project:axel:0.96
-
cpe:2.3:a:axel_project:axel:0.97
-
cpe:2.3:a:axel_project:axel:0.98
-
cpe:2.3:a:axel_project:axel:0.99
-
cpe:2.3:a:axel_project:axel:0.99a
-
cpe:2.3:a:axel_project:axel:0.99b
-
cpe:2.3:a:axel_project:axel:1.0
-
cpe:2.3:a:axel_project:axel:1.0a
-
cpe:2.3:a:axel_project:axel:1.0b
-
cpe:2.3:a:axel_project:axel:1.1
-
cpe:2.3:a:axel_project:axel:2.0
-
cpe:2.3:a:axel_project:axel:2.1
-
cpe:2.3:a:axel_project:axel:2.10
-
cpe:2.3:a:axel_project:axel:2.11
-
cpe:2.3:a:axel_project:axel:2.12
-
cpe:2.3:a:axel_project:axel:2.13
-
cpe:2.3:a:axel_project:axel:2.13.1
-
cpe:2.3:a:axel_project:axel:2.14
-
cpe:2.3:a:axel_project:axel:2.14.1
-
cpe:2.3:a:axel_project:axel:2.15
-
cpe:2.3:a:axel_project:axel:2.16
-
cpe:2.3:a:axel_project:axel:2.16.1
-
cpe:2.3:a:axel_project:axel:2.17
-
cpe:2.3:a:axel_project:axel:2.17.1
-
cpe:2.3:a:axel_project:axel:2.17.2
-
cpe:2.3:a:axel_project:axel:2.17.3
-
cpe:2.3:a:axel_project:axel:2.17.4
-
cpe:2.3:a:axel_project:axel:2.17.5
-
cpe:2.3:a:axel_project:axel:2.17.6
-
cpe:2.3:a:axel_project:axel:2.17.7
-
cpe:2.3:a:axel_project:axel:2.2
-
cpe:2.3:a:axel_project:axel:2.3
-
cpe:2.3:a:axel_project:axel:2.4
-
cpe:2.3:a:axel_project:axel:2.5
-
cpe:2.3:a:axel_project:axel:2.6
-
cpe:2.3:a:axel_project:axel:2.7
-
cpe:2.3:a:opensuse:backports_sle:15.0
-
cpe:2.3:o:fedoraproject:fedora:33
-
cpe:2.3:o:fedoraproject:fedora:34
-
cpe:2.3:o:opensuse:leap:15.1