Vulnerabilities (CVE)

Filtered by vendor Linbit Subscribe
Filtered by product Csync2
Total 2 CVE
CVE Vendors Products Updated CVSS v2 CVSS v3
CVE-2019-15523 2 Debian, Linbit 2 Debian Linux, Csync2 2024-02-04 5.0 MEDIUM 5.3 MEDIUM
An issue was discovered in LINBIT csync2 through 2.0. It does not correctly check for the return value GNUTLS_E_WARNING_ALERT_RECEIVED of the gnutls_handshake() function. It neglects to call this function again, as required by the design of the API.
CVE-2019-15522 1 Linbit 1 Csync2 2024-02-04 7.5 HIGH 9.8 CRITICAL
An issue was discovered in LINBIT csync2 through 2.0. csync_daemon_session in daemon.c neglects to force a failure of a hello command when the configuration requires use of SSL.