cbcvebase.

Serf Project Serf vulnerabilities

1 known vulnerability affecting serf_project/serf.

Total CVEs
1
CISA KEV
0
Public exploits
0
Exploited in wild
0
Severity breakdown
MEDIUM1

Vulnerabilities

Page 1 of 1
CVE-2014-3504P4MEDIUMCVSS 4.0v0.2.0v0.3.0+23 more2014-08-19
CVE-2014-3504 [MEDIUM] CVE-2014-3504: The (1) serf_ssl_cert_issuer, (2) serf_ssl_cert_subject, and (3) serf_ssl_cert_certificate functions The (1) serf_ssl_cert_issuer, (2) serf_ssl_cert_subject, and (3) serf_ssl_cert_certificate functions in Serf 0.2.0 through 1.3.x before 1.3.7 does not properly handle a NUL byte in a domain name in the subject's Common Name (CN) field of an X.509 certificate, which allows man-in-the-middle attackers to spoof arbitrary SSL servers via a crafted certificate iss
nvdosv
Serf Project Serf vulnerabilities | cvebase