CVEDB API

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2020-6750

GSocketClient in GNOME GLib through 2.62.4 may occasionally connect directly to a target address instead of connecting via a proxy server when configured to do so, because the proxy_addr field is mishandled. This bug is timing-dependent and may occur only sporadically depending on network delays. The greatest security relevance is in use cases where a proxy is used to help with privacy/anonymity, even though there is no technical barrier to a direct connection. NOTE: versions before 2.60 are unaffected.

Exploit prediction scoring system (EPSS) score

EPSS Score 0.006

EPSS Ranking 67.9%

CVSS Severity

CVSS v3 Score 5.9

CVSS v2 Score 4.3

References

Products affected by CVE-2020-6750

Gnome » Glib » Version: 2.60.0

cpe:2.3:a:gnome:glib:2.60.0
Gnome » Glib » Version: 2.60.1

cpe:2.3:a:gnome:glib:2.60.1
Gnome » Glib » Version: 2.60.2

cpe:2.3:a:gnome:glib:2.60.2
Gnome » Glib » Version: 2.60.3

cpe:2.3:a:gnome:glib:2.60.3
Gnome » Glib » Version: 2.60.4

cpe:2.3:a:gnome:glib:2.60.4
Gnome » Glib » Version: 2.60.5

cpe:2.3:a:gnome:glib:2.60.5
Gnome » Glib » Version: 2.60.6

cpe:2.3:a:gnome:glib:2.60.6
Gnome » Glib » Version: 2.60.7

cpe:2.3:a:gnome:glib:2.60.7
Gnome » Glib » Version: 2.61.0

cpe:2.3:a:gnome:glib:2.61.0
Gnome » Glib » Version: 2.61.1

cpe:2.3:a:gnome:glib:2.61.1
Gnome » Glib » Version: 2.61.2

cpe:2.3:a:gnome:glib:2.61.2
Gnome » Glib » Version: 2.61.3

cpe:2.3:a:gnome:glib:2.61.3
Gnome » Glib » Version: 2.62.0

cpe:2.3:a:gnome:glib:2.62.0
Gnome » Glib » Version: 2.62.1

cpe:2.3:a:gnome:glib:2.62.1
Gnome » Glib » Version: 2.62.2

cpe:2.3:a:gnome:glib:2.62.2
Gnome » Glib » Version: 2.62.4

cpe:2.3:a:gnome:glib:2.62.4
Fedoraproject » Fedora » Version: 30

cpe:2.3:o:fedoraproject:fedora:30
Fedoraproject » Fedora » Version: 31

cpe:2.3:o:fedoraproject:fedora:31

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2020-6750

Products

Pricing

Contact Us