PT-2020-19353 · Openssl+2 · Openssl+2

Agustingianni · Published 2020-02-27 · Updated 2024-06-15 · CVE-2020-7043

Positive Technologies (AI Summary)

CVSS v3.1

9.1

Critical

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N

Name of the Vulnerable Software and Affected Versions openfortivpn version 1.11.0

Description An issue was discovered in openfortivpn when used with OpenSSL before 1.0.2, where the tunnel.c file mishandles certificate validation. This occurs because hostname comparisons do not consider '0' characters, making it vulnerable to attacks such as a good.example.comx00evil.example.com attack.

Recommendations For openfortivpn version 1.11.0, consider updating OpenSSL to version 1.0.2 or later to mitigate the risk of exploitation. As a temporary workaround, restrict the use of certificate validation in tunnel.c until a patch is available.

Fix

Improper Certificate Validation

Weakness Enumeration

CWE-295

Related Identifiers

CVE-2020-7043

OPENSUSE-SU-2020:0301-1

OPENSUSE-SU-2020:0305-1

OPENSUSE-SU-2020_0301-1

OPENSUSE-SU-2024:11118-1

Affected Products

Openssl

Suse

Openfortivpn

References · 26

• https://github.com/adrienverge/openfortivpn/commit/6328a070ddaab16faaf008cb9a8a62439c30f2a8 · Patch
• https://github.com/adrienverge/openfortivpn/commit/cd9368c6a1b4ef91d77bb3fdbe2e5bc34aa6f4c4 · Patch
• https://osv.dev/vulnerability/openSUSE-SU-2020:0305-1 · Vendor Advisory
• https://osv.dev/vulnerability/openSUSE-SU-2024:11118-1 · Vendor Advisory
• https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/FF6HYIBREQGATRM5COF57MRQWKOKCWZ3 · Vendor Advisory
• https://osv.dev/vulnerability/UBUNTU-CVE-2020-7043 · Vendor Advisory
• https://ubuntu.com/security/CVE-2020-7043 · Vendor Advisory
• https://security-tracker.debian.org/tracker/CVE-2020-7043 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2020-7043 · Security Note
• https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/SRVVNXCNTNMPCIAZIVR4FAGYCSU53FNA · Vendor Advisory
• https://cve.org/CVERecord?id=CVE-2020-7043 · Security Note
• http://lists.opensuse.org/opensuse-security-announce/2020-03/msg00009.html · Vendor Advisory
• http://lists.opensuse.org/opensuse-security-announce/2020-03/msg00011.html · Vendor Advisory
• https://osv.dev/vulnerability/DEBIAN-CVE-2020-7043 · Vendor Advisory
• https://osv.dev/vulnerability/openSUSE-SU-2020:0301-1 · Vendor Advisory