CVEDB API

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2020-7042

An issue was discovered in openfortivpn 1.11.0 when used with OpenSSL 1.0.2 or later. tunnel.c mishandles certificate validation because the hostname check operates on uninitialized memory. The outcome is that a valid certificate is never accepted (only a malformed certificate may be accepted).

Exploit prediction scoring system (EPSS) score

EPSS Score 0.006

EPSS Ranking 68.8%

CVSS Severity

CVSS v3 Score 5.3

CVSS v2 Score 5.0

References

Products affected by CVE-2020-7042

Openfortivpn Project » Openfortivpn » Version: 1.0.0

cpe:2.3:a:openfortivpn_project:openfortivpn:1.0.0
Openfortivpn Project » Openfortivpn » Version: 1.0.1

cpe:2.3:a:openfortivpn_project:openfortivpn:1.0.1
Openfortivpn Project » Openfortivpn » Version: 1.1.0

cpe:2.3:a:openfortivpn_project:openfortivpn:1.1.0
Openfortivpn Project » Openfortivpn » Version: 1.1.1

cpe:2.3:a:openfortivpn_project:openfortivpn:1.1.1
Openfortivpn Project » Openfortivpn » Version: 1.1.2

cpe:2.3:a:openfortivpn_project:openfortivpn:1.1.2
Openfortivpn Project » Openfortivpn » Version: 1.1.3

cpe:2.3:a:openfortivpn_project:openfortivpn:1.1.3
Openfortivpn Project » Openfortivpn » Version: 1.1.4

cpe:2.3:a:openfortivpn_project:openfortivpn:1.1.4
Openfortivpn Project » Openfortivpn » Version: 1.10.0

cpe:2.3:a:openfortivpn_project:openfortivpn:1.10.0
Openfortivpn Project » Openfortivpn » Version: 1.11.0

cpe:2.3:a:openfortivpn_project:openfortivpn:1.11.0
Openfortivpn Project » Openfortivpn » Version: 1.2.0

cpe:2.3:a:openfortivpn_project:openfortivpn:1.2.0
Openfortivpn Project » Openfortivpn » Version: 1.3.0

cpe:2.3:a:openfortivpn_project:openfortivpn:1.3.0
Openfortivpn Project » Openfortivpn » Version: 1.3.1

cpe:2.3:a:openfortivpn_project:openfortivpn:1.3.1
Openfortivpn Project » Openfortivpn » Version: 1.4.0

cpe:2.3:a:openfortivpn_project:openfortivpn:1.4.0
Openfortivpn Project » Openfortivpn » Version: 1.5.0

cpe:2.3:a:openfortivpn_project:openfortivpn:1.5.0
Openfortivpn Project » Openfortivpn » Version: 1.6.0

cpe:2.3:a:openfortivpn_project:openfortivpn:1.6.0
Openfortivpn Project » Openfortivpn » Version: 1.7.0

cpe:2.3:a:openfortivpn_project:openfortivpn:1.7.0
Openfortivpn Project » Openfortivpn » Version: 1.7.1

cpe:2.3:a:openfortivpn_project:openfortivpn:1.7.1
Openfortivpn Project » Openfortivpn » Version: 1.8.0

cpe:2.3:a:openfortivpn_project:openfortivpn:1.8.0
Openfortivpn Project » Openfortivpn » Version: 1.8.1

cpe:2.3:a:openfortivpn_project:openfortivpn:1.8.1
Openfortivpn Project » Openfortivpn » Version: 1.9.0

cpe:2.3:a:openfortivpn_project:openfortivpn:1.9.0
Openssl » Openssl » Version: N/A

cpe:2.3:a:openssl:openssl:-
Openssl » Openssl » Version: 0.9.1c

cpe:2.3:a:openssl:openssl:0.9.1c
Openssl » Openssl » Version: 0.9.2b

cpe:2.3:a:openssl:openssl:0.9.2b
Openssl » Openssl » Version: 0.9.3

cpe:2.3:a:openssl:openssl:0.9.3
Openssl » Openssl » Version: 0.9.3a

cpe:2.3:a:openssl:openssl:0.9.3a
Openssl » Openssl » Version: 0.9.4

cpe:2.3:a:openssl:openssl:0.9.4
Openssl » Openssl » Version: 0.9.5

cpe:2.3:a:openssl:openssl:0.9.5
Openssl » Openssl » Version: 0.9.5a

cpe:2.3:a:openssl:openssl:0.9.5a
Openssl » Openssl » Version: 0.9.6

cpe:2.3:a:openssl:openssl:0.9.6
Openssl » Openssl » Version: 0.9.6a

cpe:2.3:a:openssl:openssl:0.9.6a
Openssl » Openssl » Version: 0.9.6b

cpe:2.3:a:openssl:openssl:0.9.6b
Openssl » Openssl » Version: 0.9.6c

cpe:2.3:a:openssl:openssl:0.9.6c
Openssl » Openssl » Version: 0.9.6d

cpe:2.3:a:openssl:openssl:0.9.6d
Openssl » Openssl » Version: 0.9.6e

cpe:2.3:a:openssl:openssl:0.9.6e
Openssl » Openssl » Version: 0.9.6f

cpe:2.3:a:openssl:openssl:0.9.6f
Openssl » Openssl » Version: 0.9.6g

cpe:2.3:a:openssl:openssl:0.9.6g
Openssl » Openssl » Version: 0.9.6h

cpe:2.3:a:openssl:openssl:0.9.6h
Openssl » Openssl » Version: 0.9.6i

cpe:2.3:a:openssl:openssl:0.9.6i
Openssl » Openssl » Version: 0.9.6j

cpe:2.3:a:openssl:openssl:0.9.6j
Openssl » Openssl » Version: 0.9.6k

cpe:2.3:a:openssl:openssl:0.9.6k
Openssl » Openssl » Version: 0.9.6l

cpe:2.3:a:openssl:openssl:0.9.6l
Openssl » Openssl » Version: 0.9.6m

cpe:2.3:a:openssl:openssl:0.9.6m
Openssl » Openssl » Version: 0.9.7

cpe:2.3:a:openssl:openssl:0.9.7
Openssl » Openssl » Version: 0.9.7a

cpe:2.3:a:openssl:openssl:0.9.7a
Openssl » Openssl » Version: 0.9.7b

cpe:2.3:a:openssl:openssl:0.9.7b
Openssl » Openssl » Version: 0.9.7c

cpe:2.3:a:openssl:openssl:0.9.7c
Openssl » Openssl » Version: 0.9.7d

cpe:2.3:a:openssl:openssl:0.9.7d
Openssl » Openssl » Version: 0.9.7e

cpe:2.3:a:openssl:openssl:0.9.7e
Openssl » Openssl » Version: 0.9.7f

cpe:2.3:a:openssl:openssl:0.9.7f
Openssl » Openssl » Version: 0.9.7g

cpe:2.3:a:openssl:openssl:0.9.7g
Openssl » Openssl » Version: 0.9.7h

cpe:2.3:a:openssl:openssl:0.9.7h
Openssl » Openssl » Version: 0.9.7i

cpe:2.3:a:openssl:openssl:0.9.7i
Openssl » Openssl » Version: 0.9.7j

cpe:2.3:a:openssl:openssl:0.9.7j
Openssl » Openssl » Version: 0.9.7k

cpe:2.3:a:openssl:openssl:0.9.7k
Openssl » Openssl » Version: 0.9.7l

cpe:2.3:a:openssl:openssl:0.9.7l
Openssl » Openssl » Version: 0.9.7m

cpe:2.3:a:openssl:openssl:0.9.7m
Openssl » Openssl » Version: 0.9.8

cpe:2.3:a:openssl:openssl:0.9.8
Openssl » Openssl » Version: 0.9.8a

cpe:2.3:a:openssl:openssl:0.9.8a
Openssl » Openssl » Version: 0.9.8b

cpe:2.3:a:openssl:openssl:0.9.8b
Openssl » Openssl » Version: 0.9.8c

cpe:2.3:a:openssl:openssl:0.9.8c
Openssl » Openssl » Version: 0.9.8c-1

cpe:2.3:a:openssl:openssl:0.9.8c-1
Openssl » Openssl » Version: 0.9.8d

cpe:2.3:a:openssl:openssl:0.9.8d
Openssl » Openssl » Version: 0.9.8e

cpe:2.3:a:openssl:openssl:0.9.8e
Openssl » Openssl » Version: 0.9.8f

cpe:2.3:a:openssl:openssl:0.9.8f
Openssl » Openssl » Version: 0.9.8g

cpe:2.3:a:openssl:openssl:0.9.8g
Openssl » Openssl » Version: 0.9.8g-9

cpe:2.3:a:openssl:openssl:0.9.8g-9
Openssl » Openssl » Version: 0.9.8h

cpe:2.3:a:openssl:openssl:0.9.8h
Openssl » Openssl » Version: 0.9.8i

cpe:2.3:a:openssl:openssl:0.9.8i
Openssl » Openssl » Version: 0.9.8j

cpe:2.3:a:openssl:openssl:0.9.8j
Openssl » Openssl » Version: 0.9.8k

cpe:2.3:a:openssl:openssl:0.9.8k
Openssl » Openssl » Version: 0.9.8l

cpe:2.3:a:openssl:openssl:0.9.8l
Openssl » Openssl » Version: 0.9.8m

cpe:2.3:a:openssl:openssl:0.9.8m
Openssl » Openssl » Version: 0.9.8n

cpe:2.3:a:openssl:openssl:0.9.8n
Openssl » Openssl » Version: 0.9.8o

cpe:2.3:a:openssl:openssl:0.9.8o
Openssl » Openssl » Version: 0.9.8p

cpe:2.3:a:openssl:openssl:0.9.8p
Openssl » Openssl » Version: 0.9.8q

cpe:2.3:a:openssl:openssl:0.9.8q
Openssl » Openssl » Version: 0.9.8r

cpe:2.3:a:openssl:openssl:0.9.8r
Openssl » Openssl » Version: 0.9.8s

cpe:2.3:a:openssl:openssl:0.9.8s
Openssl » Openssl » Version: 0.9.8t

cpe:2.3:a:openssl:openssl:0.9.8t
Openssl » Openssl » Version: 0.9.8u

cpe:2.3:a:openssl:openssl:0.9.8u
Openssl » Openssl » Version: 0.9.8v

cpe:2.3:a:openssl:openssl:0.9.8v
Openssl » Openssl » Version: 0.9.8w

cpe:2.3:a:openssl:openssl:0.9.8w
Openssl » Openssl » Version: 0.9.8x

cpe:2.3:a:openssl:openssl:0.9.8x
Openssl » Openssl » Version: 0.9.8y

cpe:2.3:a:openssl:openssl:0.9.8y
Openssl » Openssl » Version: 0.9.8z

cpe:2.3:a:openssl:openssl:0.9.8z
Openssl » Openssl » Version: 0.9.8za

cpe:2.3:a:openssl:openssl:0.9.8za
Openssl » Openssl » Version: 0.9.8zb

cpe:2.3:a:openssl:openssl:0.9.8zb
Openssl » Openssl » Version: 0.9.8zc

cpe:2.3:a:openssl:openssl:0.9.8zc
Openssl » Openssl » Version: 0.9.8zd

cpe:2.3:a:openssl:openssl:0.9.8zd
Openssl » Openssl » Version: 0.9.8ze

cpe:2.3:a:openssl:openssl:0.9.8ze
Openssl » Openssl » Version: 0.9.8zf

cpe:2.3:a:openssl:openssl:0.9.8zf
Openssl » Openssl » Version: 0.9.8zg

cpe:2.3:a:openssl:openssl:0.9.8zg
Openssl » Openssl » Version: 0.9.8zh

cpe:2.3:a:openssl:openssl:0.9.8zh
Openssl » Openssl » Version: 1.0.0

cpe:2.3:a:openssl:openssl:1.0.0
Openssl » Openssl » Version: 1.0.0a

cpe:2.3:a:openssl:openssl:1.0.0a
Openssl » Openssl » Version: 1.0.0b

cpe:2.3:a:openssl:openssl:1.0.0b
Openssl » Openssl » Version: 1.0.0c

cpe:2.3:a:openssl:openssl:1.0.0c
Openssl » Openssl » Version: 1.0.0d

cpe:2.3:a:openssl:openssl:1.0.0d
Openssl » Openssl » Version: 1.0.0e

cpe:2.3:a:openssl:openssl:1.0.0e
Openssl » Openssl » Version: 1.0.0f

cpe:2.3:a:openssl:openssl:1.0.0f
Openssl » Openssl » Version: 1.0.0g

cpe:2.3:a:openssl:openssl:1.0.0g
Openssl » Openssl » Version: 1.0.0h

cpe:2.3:a:openssl:openssl:1.0.0h
Openssl » Openssl » Version: 1.0.0i

cpe:2.3:a:openssl:openssl:1.0.0i
Openssl » Openssl » Version: 1.0.0j

cpe:2.3:a:openssl:openssl:1.0.0j
Openssl » Openssl » Version: 1.0.0k

cpe:2.3:a:openssl:openssl:1.0.0k
Openssl » Openssl » Version: 1.0.0l

cpe:2.3:a:openssl:openssl:1.0.0l
Openssl » Openssl » Version: 1.0.0m

cpe:2.3:a:openssl:openssl:1.0.0m
Openssl » Openssl » Version: 1.0.0n

cpe:2.3:a:openssl:openssl:1.0.0n
Openssl » Openssl » Version: 1.0.0o

cpe:2.3:a:openssl:openssl:1.0.0o
Openssl » Openssl » Version: 1.0.0p

cpe:2.3:a:openssl:openssl:1.0.0p
Openssl » Openssl » Version: 1.0.0q

cpe:2.3:a:openssl:openssl:1.0.0q
Openssl » Openssl » Version: 1.0.0r

cpe:2.3:a:openssl:openssl:1.0.0r
Openssl » Openssl » Version: 1.0.0s

cpe:2.3:a:openssl:openssl:1.0.0s
Openssl » Openssl » Version: 1.0.0t

cpe:2.3:a:openssl:openssl:1.0.0t
Openssl » Openssl » Version: 1.0.1

cpe:2.3:a:openssl:openssl:1.0.1
Openssl » Openssl » Version: 1.0.1a

cpe:2.3:a:openssl:openssl:1.0.1a
Openssl » Openssl » Version: 1.0.1b

cpe:2.3:a:openssl:openssl:1.0.1b
Openssl » Openssl » Version: 1.0.1c

cpe:2.3:a:openssl:openssl:1.0.1c
Openssl » Openssl » Version: 1.0.1d

cpe:2.3:a:openssl:openssl:1.0.1d
Openssl » Openssl » Version: 1.0.1e

cpe:2.3:a:openssl:openssl:1.0.1e
Openssl » Openssl » Version: 1.0.1f

cpe:2.3:a:openssl:openssl:1.0.1f
Openssl » Openssl » Version: 1.0.1g

cpe:2.3:a:openssl:openssl:1.0.1g
Openssl » Openssl » Version: 1.0.1h

cpe:2.3:a:openssl:openssl:1.0.1h
Openssl » Openssl » Version: 1.0.1i

cpe:2.3:a:openssl:openssl:1.0.1i
Openssl » Openssl » Version: 1.0.1j

cpe:2.3:a:openssl:openssl:1.0.1j
Openssl » Openssl » Version: 1.0.1k

cpe:2.3:a:openssl:openssl:1.0.1k
Openssl » Openssl » Version: 1.0.1l

cpe:2.3:a:openssl:openssl:1.0.1l
Openssl » Openssl » Version: 1.0.1m

cpe:2.3:a:openssl:openssl:1.0.1m
Openssl » Openssl » Version: 1.0.1n

cpe:2.3:a:openssl:openssl:1.0.1n
Openssl » Openssl » Version: 1.0.1o

cpe:2.3:a:openssl:openssl:1.0.1o
Openssl » Openssl » Version: 1.0.1p

cpe:2.3:a:openssl:openssl:1.0.1p
Openssl » Openssl » Version: 1.0.1q

cpe:2.3:a:openssl:openssl:1.0.1q
Openssl » Openssl » Version: 1.0.1r

cpe:2.3:a:openssl:openssl:1.0.1r
Openssl » Openssl » Version: 1.0.1s

cpe:2.3:a:openssl:openssl:1.0.1s
Openssl » Openssl » Version: 1.0.1t

cpe:2.3:a:openssl:openssl:1.0.1t
Openssl » Openssl » Version: 1.0.1u

cpe:2.3:a:openssl:openssl:1.0.1u
Openssl » Openssl » Version: 1.0.2

cpe:2.3:a:openssl:openssl:1.0.2
Opensuse » Backports Sle » Version: 15.0

cpe:2.3:a:opensuse:backports_sle:15.0
Fedoraproject » Fedora » Version: 30

cpe:2.3:o:fedoraproject:fedora:30
Fedoraproject » Fedora » Version: 31

cpe:2.3:o:fedoraproject:fedora:31
Fedoraproject » Fedora » Version: 32

cpe:2.3:o:fedoraproject:fedora:32
Opensuse » Leap » Version: 15.1

cpe:2.3:o:opensuse:leap:15.1

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2020-7042

Products

Pricing

Contact Us