摘要:
Handling of the close_notify SSL/TLS message does not lead to a connection closure, leading the server to retain the socket opened and to have the client potentially receive clear text messages afterward. Mitigation: 2.0.20 users should migrate to 2.0.21, 2.1.0 users should migrate to 2.1.1. This issue affects: Apache MINA.
安全等级: Low
公告ID: KylinSec-SA-2024-3745
发布日期: 2024年9月20日
关联CVE: CVE-2019-0231
Handling of the close_notify SSL/TLS message does not lead to a connection closure, leading the server to retain the socket opened and to have the client potentially receive clear text messages afterward. Mitigation: 2.0.20 users should migrate to 2.0.21, 2.1.0 users should migrate to 2.1.1. This issue affects: Apache MINA.
| cve名称 | 产品 | 组件 | 是否受影响 |
|---|---|---|---|
| CVE-2019-0231 | KY3.4-5A | apache-mina | Unaffected |
| CVE-2019-0231 | KY3.5.2 | apache-mina | Unaffected |
| CVE-2019-0231 | V6 | apache-mina | Unaffected |
