CVEDB API

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2021-39361

In GNOME evolution-rss through 0.3.96, network-soup.c does not enable TLS certificate verification on the SoupSessionSync objects it creates, leaving users vulnerable to network MITM attacks. NOTE: this is similar to CVE-2016-20011.

Exploit prediction scoring system (EPSS) score

EPSS Score 0.001

EPSS Ranking 29.7%

CVSS Severity

CVSS v3 Score 5.9

CVSS v2 Score 4.3

References

Products affected by CVE-2021-39361

Gnome » Evolution-Rss » Version: 0.0.8

cpe:2.3:a:gnome:evolution-rss:0.0.8
Gnome » Evolution-Rss » Version: 0.1.0

cpe:2.3:a:gnome:evolution-rss:0.1.0
Gnome » Evolution-Rss » Version: 0.1.2

cpe:2.3:a:gnome:evolution-rss:0.1.2
Gnome » Evolution-Rss » Version: 0.1.4

cpe:2.3:a:gnome:evolution-rss:0.1.4
Gnome » Evolution-Rss » Version: 0.1.4.1

cpe:2.3:a:gnome:evolution-rss:0.1.4.1
Gnome » Evolution-Rss » Version: 0.2.0

cpe:2.3:a:gnome:evolution-rss:0.2.0
Gnome » Evolution-Rss » Version: 0.2.0.1

cpe:2.3:a:gnome:evolution-rss:0.2.0.1
Gnome » Evolution-Rss » Version: 0.2.1

cpe:2.3:a:gnome:evolution-rss:0.2.1
Gnome » Evolution-Rss » Version: 0.2.2

cpe:2.3:a:gnome:evolution-rss:0.2.2
Gnome » Evolution-Rss » Version: 0.2.3

cpe:2.3:a:gnome:evolution-rss:0.2.3
Gnome » Evolution-Rss » Version: 0.2.4

cpe:2.3:a:gnome:evolution-rss:0.2.4
Gnome » Evolution-Rss » Version: 0.2.5

cpe:2.3:a:gnome:evolution-rss:0.2.5
Gnome » Evolution-Rss » Version: 0.3.91

cpe:2.3:a:gnome:evolution-rss:0.3.91
Gnome » Evolution-Rss » Version: 0.3.92

cpe:2.3:a:gnome:evolution-rss:0.3.92
Gnome » Evolution-Rss » Version: 0.3.93

cpe:2.3:a:gnome:evolution-rss:0.3.93
Gnome » Evolution-Rss » Version: 0.3.94

cpe:2.3:a:gnome:evolution-rss:0.3.94
Gnome » Evolution-Rss » Version: 0.3.95

cpe:2.3:a:gnome:evolution-rss:0.3.95
Gnome » Evolution-Rss » Version: 0.3.96

cpe:2.3:a:gnome:evolution-rss:0.3.96

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2021-39361

Products

Pricing

Contact Us