Lucene search
Veracode Vulnerability DatabaseVERACODE:32960HistoryNov 14, 2021 - 11:40 p.m.
Man-in-the-Middle (MitM)
2021-11-1423:40:36
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
14
grilo
software
tls
vulnerability
mitm
attack
EPSS
0.002
Percentile
56.9%
grilo is vulnerable to man-in-the-middle attack. The grl-net-wc.c does not enable the TLS certificate verification on the SoupSessionAsync when it’s creating. allowing an attacker to cause an MITM attack
References
access.redhat.com/documentation/en-us/red_hat_enterprise_linux/8/html/8.5_release_notes/
access.redhat.com/errata/RHSA-2021:4339
access.redhat.com/security/updates/classification/#moderate
blogs.gnome.org/mcatanzaro/2021/05/25/reminder-soupsessionsync-and-soupsessionasync-default-to-no-tls-certificate-verification/
bugzilla.redhat.com/show_bug.cgi?id=1997161
gitlab.gnome.org/GNOME/grilo/-/issues/146
lists.debian.org/debian-lts-announce/2021/09/msg00010.html
www.debian.org/security/2021/dsa-4964
Related
openvas
openvas
Debian: Security Advisory (DLA-2762-1)
2021-09-22 00:00:00
Mageia: Security Advisory (MGASA-2021-0472)
2022-01-28 00:00:00
openSUSE: Security Advisory for grilo (openSUSE-SU-2021:1312-1)
2021-09-29 00:00:00
ubuntu
ubuntu
GNOME grilo vulnerability
2021-08-30 00:00:00
osv
osv
Moderate: grilo security update
2021-11-09 09:02:57
Moderate: grilo security update
2021-11-09 09:02:57
grilo vulnerability
2021-08-30 12:17:47
nessus
nessus
RHEL 8 : grilo (RHSA-2021:4339)
2021-11-11 00:00:00
RHEL 7 : grilo (Unpatched Vulnerability)
2024-05-11 00:00:00
mageia
mageia
Updated grilo packages fix security vulnerability
2021-10-13 22:39:52
rocky
rocky
grilo security update
2021-11-09 09:02:57
almalinux
almalinux
Moderate: grilo security update
2021-11-09 09:02:57
suse
suse
Security update for grilo (important)
2021-09-28 00:00:00
Security update for grilo (important)
2021-09-23 00:00:00
debian
debian
[SECURITY] [DSA 4964-1] grilo security update
2021-08-27 19:01:49
[SECURITY] [DLA 2762-1] grilo security update
2021-09-21 22:06:47
[SECURITY] [DSA 4964-1] grilo security update
2021-08-27 19:01:49
oraclelinux
oraclelinux
grilo security update
2021-11-16 00:00:00
redhat
redhat
(RHSA-2021:4339) Moderate: grilo security update
2021-11-09 09:02:57
alpinelinux
alpinelinux
CVE-2021-39365
2021-08-22 22:15:00
prion
prion
Code injection
2021-08-22 22:15:00
debiancve
debiancve
CVE-2021-39365
2021-08-22 22:15:07
nvd
nvd
CVE-2021-39365
2021-08-22 22:15:07
ubuntucve
ubuntucve
CVE-2021-39365
2021-08-22 00:00:00
amazon
amazon
Medium: grilo
2023-10-12 15:09:00
redhatcve
redhatcve
CVE-2021-39365
2021-08-24 14:41:17
cvelist
cvelist
CVE-2021-39365
2021-08-22 21:18:23
cve
cve
CVE-2021-39365
2021-08-22 22:15:07