Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
In GNOME libgda through 6.0.0, gda-web-provider.c does not enable TLS certificate verification on the SoupSessionSync objects it creates, leaving users vulnerable to network MITM attacks. NOTE: this is similar to CVE-2016-20011.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
libgd 信任管理问题漏洞
Vulnerability Description
libgd是美国Thomas Boutell个人开发者的一个开源的用于动态创建图像的库，它支持创建图表、图形和缩略图等。 libgd 存在信任管理问题漏洞，该漏洞源于在GNOME libgda 6.0.0版本中，gda-web-provider.c 没有在它创建的 SoupSessionSync 对象上启用 TLS 证书验证。攻击者可利用该漏洞使得用户容易受到网络MITM攻击。
CVSS Information
N/A
Vulnerability Type
N/A