Bugzilla – Bug 1165301
VUL-0: CVE-2020-7043: openfortivpn: tunnel.c mishandles certificate validation because hostname comparisons do not consider '\0' characters
Last modified: 2020-05-04 12:12:49 UTC
CVE-2020-7043 An issue was discovered in openfortivpn 1.11.0 when used with OpenSSL before 1.0.2. tunnel.c mishandles certificate validation because hostname comparisons do not consider '\0' characters, as demonstrated by a good.example.com\x00evil.example.com attack. References: http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2020-7043 http://people.canonical.com/~ubuntu-security/cve/2020/CVE-2020-7043.html https://github.com/adrienverge/openfortivpn/issues/536 https://github.com/adrienverge/openfortivpn/commit/cd9368c6a1b4ef91d77bb3fdbe2e5bc34aa6f4c4 http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-7043
openSUSE-SU-2020:0301-1: An update that fixes three vulnerabilities is now available. Category: security (important) Bug References: 1165299,1165300,1165301 CVE References: CVE-2020-7041,CVE-2020-7042,CVE-2020-7043 Sources used: openSUSE Leap 15.1 (src): openfortivpn-1.12.0-lp151.2.5.1
openSUSE-SU-2020:0305-1: An update that fixes three vulnerabilities is now available. Category: security (important) Bug References: 1165299,1165300,1165301 CVE References: CVE-2020-7041,CVE-2020-7042,CVE-2020-7043 Sources used: openSUSE Backports SLE-15-SP1 (src): openfortivpn-1.12.0-bp151.3.3.1
Done