зеркало из https://github.com/golang/vulndb.git
data/reports: add missing alias for GO-2020-0043.yaml
For golang/vulndb#043 Change-Id: I4980e6fdabd68c40c679d39e628ccba4072ba0ca Reviewed-on: https://go-review.googlesource.com/c/vulndb/+/444760 Reviewed-by: Tatiana Bradley <tatiana@golang.org> TryBot-Result: Gopher Robot <gobot@golang.org> Run-TryBot: Tatiana Bradley <tatiana@golang.org> Reviewed-by: Damien Neil <dneil@google.com> Auto-Submit: Tatiana Bradley <tatiana@golang.org>
This commit is contained in:
Родитель
eee3f21550
Коммит
4453e410d9
|
@ -3,7 +3,8 @@
|
|||
"published": "2021-04-14T20:04:52Z",
|
||||
"modified": "0001-01-01T00:00:00Z",
|
||||
"aliases": [
|
||||
"CVE-2018-21246"
|
||||
"CVE-2018-21246",
|
||||
"GHSA-gr7w-x2jp-3xgw"
|
||||
],
|
||||
"details": "Due to improper TLS verification when serving traffic for multiple\nSNIs, an attacker may bypass TLS client authentication by indicating\nan SNI during the TLS handshake that is different from the name in\nthe HTTP Host header.\n",
|
||||
"affected": [
|
||||
|
|
|
@ -16,6 +16,8 @@ description: |
|
|||
published: 2021-04-14T20:04:52Z
|
||||
cves:
|
||||
- CVE-2018-21246
|
||||
ghsas:
|
||||
- GHSA-gr7w-x2jp-3xgw
|
||||
references:
|
||||
- fix: https://github.com/caddyserver/caddy/pull/2099
|
||||
- fix: https://github.com/caddyserver/caddy/commit/4d9ee000c8d2cbcdd8284007c1e0f2da7bc3c7c3
|
||||
|
|
Загрузка…
Ссылка в новой задаче