CVE-2020-24614

概要

参考情報

• lists.opensuse.org/opensuse-security-announce/2020-09/msg00065.html · Mailing List
• openwall.com/lists/oss-security/2020/08/25/1 · Mailing List
• fossil-scm.org/forum/info/a05ae3ce7760daf6 · Vendor Advisory
• fossil-scm.org/fossil/vdiff · Third Party Advisory
• lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/ARYF4YMYXCANXUDS3B3CA4JGUZNUJOJA
• lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/GVZK4K7SFBQRCGCHS76HW2LTSEH2KSUM
• security.gentoo.org/glsa/202011-04 · Third Party Advisory
• openwall.com/lists/oss-security/2020/08/20/1 · Mailing List

fossil のその他の脆弱性

• CVE-2022-34009中 5.5Fossil 2.18 on Windows allows attackers to cause a denial of service (daemon crash) via an XSS payload in a ticket. This occurs because the …
• CVE-2021-36377高 7.5Fossil before 2.14.2 and 2.15.x before 2.15.2 often skips the hostname check during TLS certificate validation.