Summary
It was discovered that Axel did not properly verify the certificates for hostnames. An
attacker could use this vulnerability to impersonate another server and obtain
sensitive information.
Fixed packages 2
| Release | Package | Fixed in |
|---|---|---|
| Ubuntu · Pro 18.04 LTS Pro:18.04:LTS | axel | 2.16.1-1ubuntu0.1~esm1 |
| Ubuntu · Pro 20.04 LTS Pro:20.04:LTS | axel | 2.17.5-1ubuntu1+esm1 |
Vulnerabilities 1
-
Unscored —
An issue was discovered in ssl.c in Axel before 2.17.8. The TLS implementation lacks hostname verification.
References
-
report
https://ubuntu.com/security/CVE-2020-13614