CVSS 3.1
5.9 mediumCVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:NCVE-2020-13614
Medium (5.9). EPSS 2.0% chance of exploitation in the next 30 days.
An issue was discovered in ssl.c in Axel before 2.17.8. The TLS implementation lacks hostname verification.
Severity
- EPSS
- 2.0% chance of exploitation in the next 30 days; higher than 80% of CVEs (scores of 2026-10-31)
- CWE
- CWE-295
- Published
- Modified
- Record from
- the NVD, synced
Affected
- axel_project:axel
- fedoraproject:fedora
- opensuse:backports_sle
- opensuse:leap
References
- http://lists.opensuse.org/opensuse-security-announce/2020-06/msg00006.html
- http://lists.opensuse.org/opensuse-security-announce/2020-06/msg00010.html
- https://github.com/axel-download-accelerator/axel/issues/262
- https://github.com/axel-download-accelerator/axel/releases/tag/v2.17.8
- https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/LPZUQSDGV5XDBJGHBWBHWJIBE47Q4QIB/