{"id":"CVE-2020-13645","aliases":["ALPINE-CVE-2020-13645","AZL-6440","DEBIAN-CVE-2020-13645","EUVD-2020-5887","GHSA-p43h-5x4h-9pp7","MGASA-2020-0314","SUSE-SU-2021:3944-1","SUSE-SU-2021:3997-1","SUSE-SU-2021:4004-1","UBUNTU-CVE-2020-13645","USN-4405-1","openSUSE-SU-2021:1094-1","openSUSE-SU-2021:1554-1","openSUSE-SU-2021:3944-1","openSUSE-SU-2024:10790-1"],"status":"published","title":"In GNOME glib-networking through 2.64.2, the implementation of GTlsClientConnection skips...","description":"In GNOME glib-networking through 2.64.2, the implementation of GTlsClientConnection skips hostname verification of the server's TLS certificate if the application fails to specify the expected server identity. This is in contrast to its intended documented behavior, to fail the certificate verification. Applications that fail to provide the server identity, including Balsa before 2.5.11 and 2.6.x before 2.6.1, accept a TLS certificate if the certificate is valid for any host.","severity":{"version":"3.1","score":6.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N","level":"medium","assessor":"primary","from":"nvd"},"epss":{"day":"2026-11-12","score":0.0202,"percentile":0.81233,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":true},"cwes":["CWE-295"],"published":"2020-05-28T11:55:39Z","modified":"2026-11-03T06:32:23Z","fixes":[{"ecosystem":"Alpine:v3.12","package":"glib-networking","fixed_in":["2.64.3-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.13","package":"glib-networking","fixed_in":["2.64.3-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.14","package":"glib-networking","fixed_in":["2.64.3-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.15","package":"glib-networking","fixed_in":["2.64.3-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.16","package":"glib-networking","fixed_in":["2.64.3-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.17","package":"glib-networking","fixed_in":["2.64.3-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.18","package":"glib-networking","fixed_in":["2.64.3-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.19","package":"glib-networking","fixed_in":["2.64.3-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.20","package":"glib-networking","fixed_in":["2.64.3-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.21","package":"glib-networking","fixed_in":["2.64.3-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.22","package":"glib-networking","fixed_in":["2.64.3-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.23","package":"glib-networking","fixed_in":["2.64.3-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.24","package":"glib-networking","fixed_in":["2.64.3-r0"],"sources":["osv"]},{"ecosystem":"Azure Linux:2","package":"glib-networking","fixed_in":["2.59.1-8"],"sources":["osv"]},{"ecosystem":"Debian:12","package":"glib-networking","fixed_in":["2.64.3-2"],"sources":["osv"]},{"ecosystem":"Debian:13","package":"glib-networking","fixed_in":["2.64.3-2"],"sources":["osv"]},{"ecosystem":"Debian:14","package":"glib-networking","fixed_in":["2.64.3-2"],"sources":["osv"]},{"ecosystem":"Mageia:7","package":"glib-networking","fixed_in":["2.60.2-1.1.mga7"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Module for Basesystem 15 SP2","package":"glib-networking","fixed_in":["2.62.4-3.3.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Module for Basesystem 15 SP3","package":"glib-networking","fixed_in":["2.62.4-3.3.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Micro 5.0","package":"glib-networking","fixed_in":["2.62.4-3.3.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Micro 5.1","package":"glib-networking","fixed_in":["2.62.4-3.3.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise High Performance Computing 15-ESPOS","package":"glib-networking","fixed_in":["2.54.1-3.6.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise High Performance Computing 15-LTSS","package":"glib-networking","fixed_in":["2.54.1-3.6.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP1-ESPOS","package":"glib-networking","fixed_in":["2.54.1-3.6.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP1-LTSS","package":"glib-networking","fixed_in":["2.54.1-3.6.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Server 15-LTSS","package":"glib-networking","fixed_in":["2.54.1-3.6.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Server 15 SP1-BCL","package":"glib-networking","fixed_in":["2.54.1-3.6.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Server 15 SP1-LTSS","package":"glib-networking","fixed_in":["2.54.1-3.6.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 15","package":"glib-networking","fixed_in":["2.54.1-3.6.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 15 SP1","package":"glib-networking","fixed_in":["2.54.1-3.6.1"],"sources":["osv"]},{"ecosystem":"SUSE:Enterprise Storage 6","package":"glib-networking","fixed_in":["2.54.1-3.6.1"],"sources":["osv"]},{"ecosystem":"SUSE:HPE Helion OpenStack 8","package":"glib-networking","fixed_in":["2.48.2-6.3.1"],"sources":["osv"]},{"ecosystem":"SUSE:OpenStack Cloud 8","package":"glib-networking","fixed_in":["2.48.2-6.3.1"],"sources":["osv"]},{"ecosystem":"SUSE:OpenStack Cloud 9","package":"glib-networking","fixed_in":["2.48.2-6.3.1"],"sources":["osv"]},{"ecosystem":"SUSE:OpenStack Cloud Crowbar 8","package":"glib-networking","fixed_in":["2.48.2-6.3.1"],"sources":["osv"]},{"ecosystem":"SUSE:OpenStack Cloud Crowbar 9","package":"glib-networking","fixed_in":["2.48.2-6.3.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 12 SP3","package":"glib-networking","fixed_in":["2.48.2-6.3.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 12 SP4","package":"glib-networking","fixed_in":["2.48.2-6.3.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Server 12 SP2-BCL","package":"glib-networking","fixed_in":["2.48.2-6.3.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Server 12 SP3-LTSS","package":"glib-networking","fixed_in":["2.48.2-6.3.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Server 12 SP3-BCL","package":"glib-networking","fixed_in":["2.48.2-6.3.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Server 12 SP4-LTSS","package":"glib-networking","fixed_in":["2.48.2-6.3.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Server 12 SP5","package":"glib-networking","fixed_in":["2.48.2-6.3.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 12 SP5","package":"glib-networking","fixed_in":["2.48.2-6.3.1"],"sources":["osv"]},{"ecosystem":"Ubuntu:16.04:LTS","package":"glib-networking","fixed_in":["2.48.2-1~ubuntu16.04.2"],"sources":["osv"]},{"ecosystem":"Ubuntu:18.04:LTS","package":"glib-networking","fixed_in":["2.56.0-1ubuntu0.1"],"sources":["osv"]},{"ecosystem":"Ubuntu:20.04:LTS","package":"balsa","fixed_in":["2.6.0-2ubuntu0.1"],"sources":["osv"]},{"ecosystem":"Ubuntu:20.04:LTS","package":"glib-networking","fixed_in":["2.64.2-1ubuntu0.1"],"sources":["osv"]},{"ecosystem":"SUSE:Package Hub 15 SP2","package":"balsa","fixed_in":["2.6.1-bp153.2.3.1"],"sources":["osv"]},{"ecosystem":"SUSE:Package Hub 15 SP3","package":"balsa","fixed_in":["2.6.1-bp153.2.3.1"],"sources":["osv"]},{"ecosystem":"openSUSE:Leap 15.2","package":"balsa","fixed_in":["2.6.1-bp153.2.3.1"],"sources":["osv"]},{"ecosystem":"openSUSE:Leap 15.3","package":"balsa","fixed_in":["2.6.1-bp153.2.3.1"],"sources":["osv"]},{"ecosystem":"openSUSE:Leap 15.2","package":"glib-networking","fixed_in":["2.62.4-lp152.2.3.1"],"sources":["osv"]},{"ecosystem":"openSUSE:Leap 15.3","package":"glib-networking","fixed_in":["2.62.4-3.3.1"],"sources":["osv"]},{"ecosystem":"openSUSE:Tumbleweed","package":"glib-networking","fixed_in":["2.68.1-1.3"],"sources":["osv"]}],"affected":[{"source":"osv","ecosystem":"Alpine:v3.12","package":"glib-networking","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"2.64.0"},{"fixed":"2.64.3-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.13","package":"glib-networking","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"2.64.0"},{"fixed":"2.64.3-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.14","package":"glib-networking","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"2.64.0"},{"fixed":"2.64.3-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.15","package":"glib-networking","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"2.64.0"},{"fixed":"2.64.3-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.16","package":"glib-networking","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"2.64.0"},{"fixed":"2.64.3-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.17","package":"glib-networking","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"2.64.0"},{"fixed":"2.64.3-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.18","package":"glib-networking","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"2.64.0"},{"fixed":"2.64.3-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.19","package":"glib-networking","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"2.64.0"},{"fixed":"2.64.3-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.20","package":"glib-networking","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"2.64.0"},{"fixed":"2.64.3-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.21","package":"glib-networking","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"2.64.0"},{"fixed":"2.64.3-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.22","package":"glib-networking","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"2.64.0"},{"fixed":"2.64.3-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.23","package":"glib-networking","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"2.64.0"},{"fixed":"2.64.3-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.24","package":"glib-networking","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"2.64.0"},{"fixed":"2.64.3-r0"}]}]},{"source":"osv","ecosystem":"Azure Linux:2","package":"glib-networking","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.59.1-8"}]}]},{"source":"osv","ecosystem":"Debian:12","package":"glib-networking","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.64.3-2"}]}]},{"source":"osv","ecosystem":"Debian:13","package":"glib-networking","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.64.3-2"}]}]},{"source":"osv","ecosystem":"Debian:14","package":"glib-networking","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.64.3-2"}]}]},{"source":"osv","ecosystem":"Mageia:7","package":"glib-networking","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.60.2-1.1.mga7"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Basesystem 15 SP2","package":"glib-networking","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.62.4-3.3.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Basesystem 15 SP3","package":"glib-networking","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.62.4-3.3.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Micro 5.0","package":"glib-networking","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.62.4-3.3.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Micro 5.1","package":"glib-networking","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.62.4-3.3.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15-ESPOS","package":"glib-networking","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.54.1-3.6.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15-LTSS","package":"glib-networking","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.54.1-3.6.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP1-ESPOS","package":"glib-networking","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.54.1-3.6.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP1-LTSS","package":"glib-networking","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.54.1-3.6.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 15-LTSS","package":"glib-networking","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.54.1-3.6.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 15 SP1-BCL","package":"glib-networking","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.54.1-3.6.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 15 SP1-LTSS","package":"glib-networking","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.54.1-3.6.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 15","package":"glib-networking","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.54.1-3.6.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 15 SP1","package":"glib-networking","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.54.1-3.6.1"}]}]},{"source":"osv","ecosystem":"SUSE:Enterprise Storage 6","package":"glib-networking","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.54.1-3.6.1"}]}]},{"source":"osv","ecosystem":"SUSE:HPE Helion OpenStack 8","package":"glib-networking","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.48.2-6.3.1"}]}]},{"source":"osv","ecosystem":"SUSE:OpenStack Cloud 8","package":"glib-networking","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.48.2-6.3.1"}]}]},{"source":"osv","ecosystem":"SUSE:OpenStack Cloud 9","package":"glib-networking","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.48.2-6.3.1"}]}]},{"source":"osv","ecosystem":"SUSE:OpenStack Cloud Crowbar 8","package":"glib-networking","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.48.2-6.3.1"}]}]},{"source":"osv","ecosystem":"SUSE:OpenStack Cloud Crowbar 9","package":"glib-networking","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.48.2-6.3.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 12 SP3","package":"glib-networking","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.48.2-6.3.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 12 SP4","package":"glib-networking","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.48.2-6.3.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 12 SP2-BCL","package":"glib-networking","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.48.2-6.3.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 12 SP3-LTSS","package":"glib-networking","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.48.2-6.3.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 12 SP3-BCL","package":"glib-networking","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.48.2-6.3.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 12 SP4-LTSS","package":"glib-networking","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.48.2-6.3.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 12 SP5","package":"glib-networking","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.48.2-6.3.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 12 SP5","package":"glib-networking","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.48.2-6.3.1"}]}]},{"source":"osv","ecosystem":"Ubuntu:16.04:LTS","package":"glib-networking","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.48.2-1~ubuntu16.04.2"}]}],"versions":["2.46.0-1","2.46.1-1","2.46.1-1build1","2.48.0-1","2.48.2-1~ubuntu16.04.1"]},{"source":"osv","ecosystem":"Ubuntu:18.04:LTS","package":"glib-networking","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.56.0-1ubuntu0.1"}]}],"versions":["2.54.0-1","2.54.1-1","2.54.1-2","2.55.90-1","2.56.0-1"]},{"source":"osv","ecosystem":"Ubuntu:20.04:LTS","package":"balsa","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.6.0-2ubuntu0.1"}]}],"versions":["2.5.6-2","2.5.6-2build1","2.5.9-1","2.5.9-2","2.5.9-3","2.5.9-4","2.6.0-2"]},{"source":"osv","ecosystem":"Ubuntu:20.04:LTS","package":"glib-networking","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.64.2-1ubuntu0.1"}]}],"versions":["2.62.1-1","2.63.2-1","2.63.3-0build1","2.63.90-1ubuntu1","2.63.91-1ubuntu1","2.64.0-1","2.64.1-1","2.64.2-1build1"]},{"source":"osv","ecosystem":"Ubuntu:16.04:LTS","package":"glib-networking","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.48.2-1~ubuntu16.04.2"}]}],"versions":["2.46.0-1","2.46.1-1","2.46.1-1build1","2.48.0-1","2.48.2-1~ubuntu16.04.1"]},{"source":"osv","ecosystem":"Ubuntu:18.04:LTS","package":"glib-networking","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.56.0-1ubuntu0.1"}]}],"versions":["2.54.0-1","2.54.1-1","2.54.1-2","2.55.90-1","2.56.0-1"]},{"source":"osv","ecosystem":"Ubuntu:20.04:LTS","package":"glib-networking","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.64.2-1ubuntu0.1"}]}],"versions":["2.62.1-1","2.63.2-1","2.63.3-0build1","2.63.90-1ubuntu1","2.63.91-1ubuntu1","2.64.0-1","2.64.1-1","2.64.2-1build1"]},{"source":"osv","ecosystem":"SUSE:Package Hub 15 SP2","package":"balsa","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.6.1-bp153.2.3.1"}]}]},{"source":"osv","ecosystem":"SUSE:Package Hub 15 SP3","package":"balsa","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.6.1-bp153.2.3.1"}]}]},{"source":"osv","ecosystem":"openSUSE:Leap 15.2","package":"balsa","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.6.1-bp153.2.3.1"}]}]},{"source":"osv","ecosystem":"openSUSE:Leap 15.3","package":"balsa","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.6.1-bp153.2.3.1"}]}]},{"source":"osv","ecosystem":"openSUSE:Leap 15.2","package":"glib-networking","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.62.4-lp152.2.3.1"}]}]},{"source":"osv","ecosystem":"openSUSE:Leap 15.3","package":"glib-networking","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.62.4-3.3.1"}]}]},{"source":"osv","ecosystem":"openSUSE:Tumbleweed","package":"glib-networking","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.68.1-1.3"}]}]}],"products":[{"vendor":"broadcom","product":"fabric_operating_system"},{"vendor":"canonical","product":"ubuntu_linux"},{"vendor":"fedoraproject","product":"fedora"},{"vendor":"gnome","product":"balsa"},{"vendor":"gnome","product":"glib-networking"},{"vendor":"netapp","product":"cloud_backup"}],"references":[{"url":"https://gitlab.gnome.org/GNOME/glib-networking/-/issues/135","tags":["x_refsource_MISC","x_transferred","Exploit","Vendor Advisory","evidence"]},{"url":"https://gitlab.gnome.org/GNOME/balsa/-/issues/34","tags":["x_refsource_MISC","x_transferred","Exploit","Vendor Advisory","evidence"]},{"url":"https://security.netapp.com/advisory/ntap-20200608-0004/","tags":["x_refsource_CONFIRM","x_transferred","Third Party Advisory","advisory"]},{"url":"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/TQEQJQ4XFMFCFJTEXKL2ZO3UELBPCKSK/","tags":["vendor-advisory","x_refsource_FEDORA","x_transferred","web"]},{"url":"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/HLEX2IP62SU6WJ4SK3U766XGLQK3J62O/","tags":["vendor-advisory","x_refsource_FEDORA","x_transferred","web"]},{"url":"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/LRCUM22YEWWKNMN2BP5LTVDM5P4VWIXS/","tags":["vendor-advisory","x_refsource_FEDORA","x_transferred","web"]},{"url":"https://usn.ubuntu.com/4405-1/","tags":["vendor-advisory","x_refsource_UBUNTU","x_transferred","Third Party Advisory","advisory"]},{"url":"https://security.gentoo.org/glsa/202007-50","tags":["vendor-advisory","x_refsource_GENTOO","x_transferred","Third Party Advisory","advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2020-13645","tags":["web"]},{"url":"https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/HLEX2IP62SU6WJ4SK3U766XGLQK3J62O/"},{"url":"https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/LRCUM22YEWWKNMN2BP5LTVDM5P4VWIXS/"},{"url":"https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/TQEQJQ4XFMFCFJTEXKL2ZO3UELBPCKSK/"},{"url":"https://github.com/advisories/GHSA-p43h-5x4h-9pp7"},{"url":"https://security.alpinelinux.org/vuln/CVE-2020-13645","tags":["advisory"]},{"url":"https://security-tracker.debian.org/tracker/CVE-2020-13645","tags":["advisory"]},{"url":"https://advisories.mageia.org/MGASA-2020-0314.html","tags":["advisory"]},{"url":"https://bugs.mageia.org/show_bug.cgi?id=26819","tags":["report"]},{"url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-13645","tags":["advisory"]},{"url":"https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/thread/TQEQJQ4XFMFCFJTEXKL2ZO3UELBPCKSK/","tags":["web"]},{"url":"https://ubuntu.com/security/notices/USN-4405-1","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2021/suse-su-20213944-1/","tags":["advisory"]},{"url":"https://bugzilla.suse.com/1172460","tags":["report"]},{"url":"https://www.suse.com/security/cve/CVE-2020-13645","tags":["web"]},{"url":"https://www.suse.com/support/update/announcement/2021/suse-su-20213997-1/","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2021/suse-su-20214004-1/","tags":["advisory"]},{"url":"https://ubuntu.com/security/CVE-2020-13645","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2020-13645","tags":["report"]},{"url":"https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/42QNVR5Y3Z3YQLA2G7H66ZAGRYHVNWHT/","tags":["advisory"]},{"url":"https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/7ALNGEQGJBIVTIE7PVRV4LMX5VCNHFOZ/","tags":["advisory"]},{"url":"https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/3WJQDO7GLZV6KOOPFA2ZGLO6YGORWTRO/","tags":["advisory"]},{"url":"","tags":["advisory"]}],"sources":{"cve":[{"id":"CVE-2020-13645","description":"In GNOME glib-networking through 2.64.2, the implementation of GTlsClientConnection skips hostname verification of the server's TLS certificate if the application fails to specify the expected server identity. This is in contrast to its intended documented behavior, to fail the certificate verification. Applications that fail to provide the server identity, including Balsa before 2.5.11 and 2.6.x before 2.6.1, accept a TLS certificate if the certificate is valid for any host.","status":"published","published":"2020-05-28T11:55:39Z","modified":"2024-08-04T12:25:16.135Z","updated_at":"2026-11-02T14:35:54.170199Z"}],"euvd":[{"id":"EUVD-2020-5887","description":"In GNOME glib-networking through 2.64.2, the implementation of GTlsClientConnection skips hostname verification of the server's TLS certificate if the application fails to specify the expected server identity. This is in contrast to its intended documented behavior, to fail the certificate verification. Applications that fail to provide the server identity, including Balsa before 2.5.11 and 2.6.x before 2.6.1, accept a TLS certificate if the certificate is valid for any host.","status":"published","published":"2020-05-28T11:55:39Z","modified":"2024-08-04T12:25:16Z","updated_at":"2026-11-03T03:07:36.6695Z"}],"ghsa":[{"id":"GHSA-p43h-5x4h-9pp7","title":"In GNOME glib-networking through 2.64.2, the implementation of GTlsClientConnection skips...","description":"In GNOME glib-networking through 2.64.2, the implementation of GTlsClientConnection skips hostname verification of the server's TLS certificate if the application fails to specify the expected server identity. This is in contrast to its intended documented behavior, to fail the certificate verification. Applications that fail to provide the server identity, including Balsa before 2.5.11 and 2.6.x before 2.6.1, accept a TLS certificate if the certificate is valid for any host.","status":"published","published":"2022-05-24T17:18:48Z","modified":"2023-01-29T05:03:02Z","cwes":["CWE-295"],"updated_at":"2026-11-02T14:45:13.764942Z"}],"nvd":[{"id":"CVE-2020-13645","description":"In GNOME glib-networking through 2.64.2, the implementation of GTlsClientConnection skips hostname verification of the server's TLS certificate if the application fails to specify the expected server identity. This is in contrast to its intended documented behavior, to fail the certificate verification. Applications that fail to provide the server identity, including Balsa before 2.5.11 and 2.6.x before 2.6.1, accept a TLS certificate if the certificate is valid for any host.","status":"published","published":"2020-05-28T12:15:11.173Z","modified":"2026-06-17T02:53:30.09Z","cvss":[{"version":"3.1","score":6.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N","level":"medium","assessor":"primary"},{"version":"2.0","score":6.4,"vector":"AV:N/AC:L/Au:N/C:P/I:P/A:N","level":"medium","assessor":"primary"}],"cwes":["CWE-295"],"updated_at":"2026-11-02T14:06:04.922138Z"}],"osv":[{"id":"ALPINE-CVE-2020-13645","description":"In GNOME glib-networking through 2.64.2, the implementation of GTlsClientConnection skips hostname verification of the server's TLS certificate if the application fails to specify the expected server identity. This is in contrast to its intended documented behavior, to fail the certificate verification. Applications that fail to provide the server identity, including Balsa before 2.5.11 and 2.6.x before 2.6.1, accept a TLS certificate if the certificate is valid for any host.","status":"published","published":"2020-05-28T12:15:11.173Z","modified":"2026-11-03T06:32:23.72172433Z","cvss":[{"version":"3.1","score":6.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N","level":"medium"}],"updated_at":"2026-11-03T07:17:57.723967Z"},{"id":"AZL-6440","title":"CVE-2020-13645 affecting package glib-networking for versions less than 2.59.1-8","description":"In GNOME glib-networking through 2.64.2, the implementation of GTlsClientConnection skips hostname verification of the server's TLS certificate if the application fails to specify the expected server identity. This is in contrast to its intended documented behavior, to fail the certificate verification. Applications that fail to provide the server identity, including Balsa before 2.5.11 and 2.6.x before 2.6.1, accept a TLS certificate if the certificate is valid for any host.","status":"published","published":"2020-05-28T12:15:11Z","modified":"2026-04-21T04:32:24.349613Z","cvss":[{"version":"3.1","score":6.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N","level":"medium"}],"updated_at":"2026-11-02T15:28:08.076947Z"},{"id":"CVE-2020-13645","description":"In GNOME glib-networking through 2.64.2, the implementation of GTlsClientConnection skips hostname verification of the server's TLS certificate if the application fails to specify the expected server identity. This is in contrast to its intended documented behavior, to fail the certificate verification. Applications that fail to provide the server identity, including Balsa before 2.5.11 and 2.6.x before 2.6.1, accept a TLS certificate if the certificate is valid for any host.","status":"published","published":"2020-05-28T12:15:11.173Z","modified":"2026-10-24T10:47:27.222788308Z","cvss":[{"version":"3.1","score":6.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N","level":"medium"}],"updated_at":"2026-11-02T15:44:14.418339Z"},{"id":"DEBIAN-CVE-2020-13645","description":"In GNOME glib-networking through 2.64.2, the implementation of GTlsClientConnection skips hostname verification of the server's TLS certificate if the application fails to specify the expected server identity. This is in contrast to its intended documented behavior, to fail the certificate verification. Applications that fail to provide the server identity, including Balsa before 2.5.11 and 2.6.x before 2.6.1, accept a TLS certificate if the certificate is valid for any host.","status":"published","published":"2020-05-28T12:15:11.173Z","modified":"2026-10-26T12:00:36.39254281Z","cvss":[{"version":"3.1","score":6.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N","level":"medium"}],"updated_at":"2026-11-02T15:45:32.862554Z"},{"id":"UBUNTU-CVE-2020-13645","description":"In GNOME glib-networking through 2.64.2, the implementation of GTlsClientConnection skips hostname verification of the server's TLS certificate if the application fails to specify the expected server identity. This is in contrast to its intended documented behavior, to fail the certificate verification. Applications that fail to provide the server identity, including Balsa before 2.5.11 and 2.6.x before 2.6.1, accept a TLS certificate if the certificate is valid for any host.","status":"published","published":"2020-05-28T12:15:00Z","modified":"2026-02-04T03:18:37.13416Z","cvss":[{"version":"3.1","score":6.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N","level":"medium"}],"updated_at":"2026-11-02T15:54:22.804634Z"},{"id":"MGASA-2020-0314","title":"Updated glib-networking packages fix security vulnerability","description":"The updated packages fix a security vulnerability:\n\nIn GNOME glib-networking through 2.64.2, the implementation of\nGTlsClientConnection skips hostname verification of the server's\nTLS certificate if the application fails to specify the expected\nserver identity. This is in contrast to its intended documented\nbehavior, to fail the certificate verification. Applications that\nfail to provide the server identity, including Balsa before 2.5.11\nand 2.6.x before 2.6.1, accept a TLS certificate if the certificate\nis valid for any host. (CVE-2020-13645)\n","status":"published","published":"2020-08-16T11:09:34Z","modified":"2026-04-16T04:42:03.781654927Z","updated_at":"2026-11-02T15:49:41.151324Z"},{"id":"openSUSE-SU-2021:1094-1","title":"Security update for balsa","description":"This update for balsa fixes the following issues:\n\nUpdate to version 2.6.1\n\n- CVE-2020-13645: fix server identity verification (boo#1172460)\n\n","status":"published","published":"2021-08-05T10:13:30Z","modified":"2026-02-04T03:07:39.369921Z","updated_at":"2026-11-02T16:58:31.879684Z"},{"id":"openSUSE-SU-2021:1554-1","title":"Security update for glib-networking","description":"This update for glib-networking fixes the following issues:\n\nUpdate to version 2.62.4: \n\n- CVE-2020-13645: Fixed a connection failure when the server identity is unset (bsc#1172460).\n\nThis update was imported from the SUSE:SLE-15-SP2:Update update project.","status":"published","published":"2021-12-10T09:49:46Z","modified":"2026-02-04T03:54:46.05477Z","updated_at":"2026-11-02T16:58:32.266854Z"},{"id":"openSUSE-SU-2021:3944-1","title":"Security update for glib-networking","description":"This update for glib-networking fixes the following issues:\n\nUpdate to version 2.62.4: \n\n- CVE-2020-13645: Fixed a connection failure when the server identity is unset (bsc#1172460).\n","status":"published","published":"2021-12-06T13:56:33Z","modified":"2026-02-04T03:57:25.055265Z","updated_at":"2026-11-02T16:58:32.266854Z"},{"id":"openSUSE-SU-2024:10790-1","title":"glib-networking-2.68.1-1.3 on GA media","description":"These are all security issues fixed in the glib-networking-2.68.1-1.3 package on the GA media of openSUSE Tumbleweed.","status":"published","published":"2024-06-15T00:00:00Z","modified":"2026-02-04T03:09:34.359207Z","updated_at":"2026-11-02T16:58:34.487567Z"},{"id":"SUSE-SU-2021:3944-1","title":"Security update for glib-networking","description":"This update for glib-networking fixes the following issues:\n\nUpdate to version 2.62.4: \n\n- CVE-2020-13645: Fixed a connection failure when the server identity is unset (bsc#1172460).\n","status":"published","published":"2021-12-06T13:56:37Z","modified":"2026-02-04T04:28:54.517033Z","updated_at":"2026-11-02T15:53:50.066806Z"},{"id":"SUSE-SU-2021:3997-1","title":"Security update for glib-networking","description":"This update for glib-networking fixes the following issues:\n\n- CVE-2020-13645: Fixed a connection failure when the server identity is unset (bsc#1172460).\n","status":"published","published":"2021-12-10T16:33:15Z","modified":"2026-02-04T04:35:41.46616Z","updated_at":"2026-11-02T15:53:50.066806Z"},{"id":"SUSE-SU-2021:4004-1","title":"Security update for glib-networking","description":"This update for glib-networking fixes the following issues:\n\n- CVE-2020-13645: Fixed a connection failure when the server identity is unset (bsc#1172460).\n","status":"published","published":"2021-12-13T09:58:19Z","modified":"2026-02-04T03:51:02.732934Z","updated_at":"2026-11-02T15:53:50.066806Z"},{"id":"USN-4405-1","title":"glib-networking vulnerability","description":"It was discovered that glib-networking skipped hostname certificate\nverification if the application failed to specify the server\nidentity. A remote attacker could use this to perform a\nperson-in-the-middle attack and expose sensitive information.\n","status":"published","published":"2020-06-29T02:05:31Z","modified":"2026-02-10T04:41:51Z","updated_at":"2026-11-02T16:58:14.547547Z"}]}}