CVE-2012-6709
ELinks 0.12 and Twibright Links 2.3 have Missing SSL Certificate Validation.
ELinks 0.12 and Twibright Links 2.3 have Missing SSL Certificate Validation.
Attack profile
How easy it is to exploit
- Attack vector
- Network
- Complexity
- High
- Privileges needed
- None
- User interaction
- None
What an attacker can affect
- Confidentiality
- High
- Integrity
- None
- Availability
- None
Exploit likelihood
What each source reports
NVD Score used
5.9
ELinks 0.12 and Twibright Links 2.3 have Missing SSL Certificate Validation.
- Record
CVE-2012-6709- CVSS 3.0
- 5.9 Medium
CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N - CVSS 2.0
- 4.3 Medium
AV:N/AC:M/Au:N/C:P/I:N/A:N - Weakness
- CWE-295
- Updated
- 2026-11-02
CVE List No score
ELinks 0.12 and Twibright Links 2.3 have Missing SSL Certificate Validation.
- Record
CVE-2012-6709- Updated
- 2026-11-02
EUVDEUVD-2012-6550 No score
ELinks 0.12 and Twibright Links 2.3 have Missing SSL Certificate Validation.
- Record
EUVD-2012-6550- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-8758-mxx4-h8h8
5.9
ELinks 0.12 and Twibright Links 2.3 have Missing SSL Certificate Validation.
ELinks 0.12 and Twibright Links 2.3 have Missing SSL Certificate Validation.
- Record
GHSA-8758-mxx4-h8h8- CVSS 3.0
- 5.9 Medium
CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N - Weakness
- CWE-295
- Updated
- 2026-11-02
OSV
5.9
ELinks 0.12 and Twibright Links 2.3 have Missing SSL Certificate Validation.
- Record
CVE-2012-6709- CVSS 3.0
- 5.9 Medium
CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N - Updated
- 2026-11-02
OSVDEBIAN-CVE-2012-6709
5.9
ELinks 0.12 and Twibright Links 2.3 have Missing SSL Certificate Validation.
- Record
DEBIAN-CVE-2012-6709- CVSS 3.0
- 5.9 Medium
CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N - Updated
- 2026-11-02
OSVUBUNTU-CVE-2012-6709
5.9
ELinks 0.12 and Twibright Links 2.3 have Missing SSL Certificate Validation.
- Record
UBUNTU-CVE-2012-6709- CVSS 3.0
- 5.9 Medium
CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N - Updated
- 2026-11-02
Affected products
Affected packages
| Package | Affected | Fixed |
|---|---|---|
elinksDebian:12 |
before 0.13~20190125-3 | 0.13~20190125-3 |
elinksDebian:13 |
before 0.13~20190125-3 | 0.13~20190125-3 |
elinksDebian:14 |
before 0.13~20190125-3 | 0.13~20190125-3 |
links2Debian:12 |
before 2.6-1 | 2.6-1 |
links2Debian:13 |
before 2.6-1 | 2.6-1 |
links2Debian:14 |
before 2.6-1 | 2.6-1 |
elinksUbuntu:16.04:LTS |
All versions, plus listed versions 0.12~pre6-100.12~pre6-110.12~pre6-11build10.12~pre6-11build2 |
None known |
elinksUbuntu:18.04:LTS |
All versions, plus listed versions 0.12~pre6-12build10.12~pre6-13 |
None known |
History
| Recorded | Changed | Sources |
|---|---|---|
| aliases | EUVD | |
| first indexed | CVE List, GitHub Advisories, NVD, OSV |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2012-6709 is a medium vulnerability (CVSS 5.9) in Elinks, published February 23, 2018. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 0.66%, the 51st percentile. Fixed in elinks 0.13~20190125-3.
References
bugzilla.redhat.com/show_bug.cgi?id=881399
bugs.debian.org/cgi-bin/bugreport.cgi?bug=694658
nvd.nist.gov/vuln/detail/CVE-2012-6709
github.com/advisories/GHSA-8758-mxx4-h8h8
security-tracker.debian.org/tracker/CVE-2012-6709
ubuntu.com/security/CVE-2012-6709
github.com/nabetaro/elinks/issues/1
cve.org/CVERecord?id=CVE-2012-6709