CVE-2019-15523 — Unchecked Return Value in Csync2
Severity
5.3MEDIUMNVD
EPSS
0.7%
top 28.59%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
Timeline
PublishedDec 30
Latest updateMay 24
Description
An issue was discovered in LINBIT csync2 through 2.0. It does not correctly check for the return value GNUTLS_E_WARNING_ALERT_RECEIVED of the gnutls_handshake() function. It neglects to call this function again, as required by the design of the API.
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:NExploitability: 3.9 | Impact: 1.4
Affected Packages3 packages
Also affects: Debian Linux 9.0
Patches
🔴Vulnerability Details
2📋Vendor Advisories
1Debian▶
CVE-2019-15523: csync2 - An issue was discovered in LINBIT csync2 through 2.0. It does not correctly chec...↗2019