CVE-2021-21374

概要

参考情報

• consensys.net/diligence/vulnerabilities/nim-insecure-ssl-tls-defaults-remote-code-execution · Exploit
• nim-lang/Nim#16940 · Patch
• nim-lang/nimble · Release Notes
• nim-lang/security security advisory · Third Party Advisory

nim のその他の脆弱性

• CVE-2021-46872中 6.1An issue was discovered in Nim before 1.6.2. The RST module of the Nim language stdlib, as used in NimForum and other products, permits the …
• CVE-2021-29495高 7.5Nim is a statically typed compiled systems programming language. In Nim standard library before 1.4.2, httpClient SSL/TLS certificate verifi…
• CVE-2021-21373中 5.9Nimble is a package manager for the Nim programming language. In Nim release versions before versions 1.2.10 and 1.4.4, "nimble refresh" fet…
• CVE-2021-21372高 8.8Nimble is a package manager for the Nim programming language. In Nim release version before versions 1.2.10 and 1.4.4, Nimble doCmd is used …
• CVE-2020-15690緊急 9.8In Nim before 1.2.6, the standard library asyncftpclient lacks a check for whether a message contains a newline character.