CVE-2020-14929

Alpine before 2.23 silently proceeds to use an insecure connection after a /tls is sent in certain circumstances involving PREAUTH, which is a less secure…

published June 19, 2020

CVSS
—
EPSS
2%
Percentile
78.6
In the wild
Unconfirmed
What it is

Alpine before 2.23 silently proceeds to use an insecure connection after a /tls is sent in certain circumstances involving PREAUTH, which is a less secure behavior than the alternative of closing the connection and letting the user decide what they would like to do.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.01823 · 78.6th percentile
Published
2020-06-19T18:58Z
EPSS history
Timeline
  • 19 JUN 18:58Z
    Alpine before 2.23 silently proceeds to use an insecure connection after a /tls is sent in certain circumstances involving PREAUTH, which is a less secure…
    cvelistv5