Slacker News Slacker News logo featuring a lazy sloth with a folded newspaper hat
  • top
  • new
  • show
  • ask
  • jobs
Library

Comment by worthless-trash

1 year ago

What was the CVE for that cleartext downgrade attack ?

2 comments

worthless-trash

Reply

stackghost  1 year ago

For gnutls? I believe it was this one: https://nvd.nist.gov/vuln/detail/CVE-2020-13777

It was not a "downgrade attack", it was passive cleartext recovery.

  • worthless-trash  1 year ago

    Ah, my mistake, thats why I couldn't find it. Thanks for the link.

Slacker News

Product

  • API Reference
  • Hacker News RSS
  • Source on GitHub

Community

  • Support Ukraine
  • Equal Justice Initiative
  • GiveWell Charities