CoreCVE
Back

HIGH

Alpine before 2.23 silently proceeds to use an insecure connection after a /tls is sent in certain circumstances involving PREAUTH, which is a less secure behavior than the alternative of closing the connection and letting the user decide what they would like to do

Published Jun 19, 2020

Description

Alpine before 2.23 silently proceeds to use an insecure connection after a /tls is sent in certain circumstances involving PREAUTH, which is a less secure behavior than the alternative of closing the connection and letting the user decide what they would like to do.

Affected products

Remediation

No remediation recorded yet.

Weaknesses (0)

No CWE recorded.

References (5)

Change history (0)

No recorded changes yet.

Sources
CVE.org / MITRE
Status PUBLISHED
Assigner mitre
Published Jun 19, 2020
Updated Aug 4, 2024
Reserved Jun 19, 2020
Link CVE-2020-14929
CISA Vulnrichment
Updated n/a
NVD
Status Modified
Modified Jun 17, 2026
Link CVE-2020-14929
Red Hat
Severity n/a
Public date n/a
Links CVE-2020-14929
ENISA EUVD
Assigner mitre
Published Jun 19, 2020
Updated Aug 4, 2024
Exploited since n/a
Link EUVD-2020-7065
EUVD-2020-7065