CVE-2020-13614
Fixed in a distro release EPSS 2%
An issue was discovered in ssl.c in Axel before 2.17.8. The TLS implementation lacks hostname verification.
Products: axel_project axel, fedoraproject fedora, opensuse backports_sle, opensuse leap
Distro releases
| Release | Package | Fixed in |
|---|---|---|
| Alpine 3.10 | axel | 2.17.3-r1 |
| Alpine 3.11 | axel | 2.17.6-r1 |
| Alpine 3.12 | axel | 2.17.8-r0 |
| Alpine 3.13 | axel | 2.17.8-r0 |
| Alpine 3.14 | axel | 2.17.8-r0 |
| Alpine 3.15 | axel | 2.17.8-r0 |
| Alpine 3.16 | axel | 2.17.8-r0 |
| Alpine 3.17 | axel | 2.17.8-r0 |
| Alpine 3.18 | axel | 2.17.8-r0 |
| Alpine 3.19 | axel | 2.17.8-r0 |
| Alpine 3.20 | axel | 2.17.8-r0 |
| Alpine 3.21 | axel | 2.17.8-r0 |
| Alpine 3.22 | axel | 2.17.8-r0 |
| Alpine 3.23 | axel | 2.17.8-r0 |
| Alpine 3.24 | axel | 2.17.8-r0 |
| Alpine 3.9 | axel | 2.16.1-r3 |
| Debian 12 | axel | 2.17.8-1 |
| Debian 13 | axel | 2.17.8-1 |
| Debian 14 | axel | 2.17.8-1 |
| SUSE Package Hub 15 SP1 | axel | 2.17.8-bp151.4.3.1 |
| Ubuntu Pro 18.04 LTS | axel | 2.16.1-1ubuntu0.1~esm1 |
| Ubuntu Pro 20.04 LTS | axel | 2.17.5-1ubuntu1+esm1 |
| openSUSE Leap 15.1 | axel | 2.17.8-lp151.3.3.1 |
| openSUSE Tumbleweed | axel | 2.17.10-1.6 |