USN-6901-1: stunnel vulnerability
It was discovered that stunnel did not properly validate client certificates when configured to use both the redirect and verifyChain options. A remote attacker could potentially use this issue to obtain sensitive information by accessing the tunneled service.
Affected Software
Event History
Frequently Asked Questions
What is the severity of USN-6901-1?
The severity of USN-6901-1 is considered high due to the potential for sensitive information exposure by remote attackers.
How do I fix USN-6901-1?
To fix USN-6901-1, update the stunnel4 package to either version 3:5.56-1ubuntu0.2 for Ubuntu 20.04 or 3:5.44-1ubuntu3+esm1 for Ubuntu 18.04.
What vulnerabilities does USN-6901-1 address?
USN-6901-1 addresses a vulnerability in stunnel related to improper validation of client certificates when using redirect and verifyChain options.
Who is affected by USN-6901-1?
USN-6901-1 affects users of stunnel4 on Ubuntu 20.04 and 18.04 who have configured both the redirect and verifyChain options.
What is the risk of not addressing USN-6901-1?
Not addressing USN-6901-1 may allow remote attackers to exploit the vulnerability and obtain sensitive information through the tunneled service.