Candidate: CVE-2013-0243
PublicDate: 2019-12-05 16:15:00 UTC
References:
 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-0243
 http://www.openwall.com/lists/oss-security/2013/01/30
Description:
 haskell-tls-extra before 0.6.1 has Basic Constraints attribute
 vulnerability may lead to Man in the Middle attacks on TLS connections
Ubuntu-Description:
Notes:
Bugs:
 https://github.com/vincenthz/hs-tls/issues/29
Priority: medium
Discovered-by:
Assigned-to:
CVSS:
 nvd: CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N [7.4 HIGH]

Patches_haskell-tls-extra:
 upstream: https://github.com/vincenthz/hs-tls/commit/15885c0649ceabd2f4d2913df8ac6dc63d6b3b37
upstream_haskell-tls-extra: released (0.4.6.1-1)
hardy_haskell-tls-extra: DNE
lucid_haskell-tls-extra: DNE
oneiric_haskell-tls-extra: ignored (reached end-of-life)
precise_haskell-tls-extra: ignored (reached end-of-life)
precise/esm_haskell-tls-extra: DNE (precise was needed)
quantal_haskell-tls-extra: ignored (reached end-of-life)
raring_haskell-tls-extra: not-affected (0.6.1-1build3)
saucy_haskell-tls-extra: not-affected (0.6.1-1build3)
trusty_haskell-tls-extra: not-affected (0.6.1-1build3)
trusty/esm_haskell-tls-extra: DNE (trusty was not-affected [0.6.1-1build3])
utopic_haskell-tls-extra: DNE
vivid_haskell-tls-extra: DNE
vivid/stable-phone-overlay_haskell-tls-extra: DNE
vivid/ubuntu-core_haskell-tls-extra: DNE
wily_haskell-tls-extra: DNE
xenial_haskell-tls-extra: DNE
yakkety_haskell-tls-extra: DNE
zesty_haskell-tls-extra: DNE
devel_haskell-tls-extra: DNE