Approved changes feed: RSS · Atom

cpe:2.3:a:linbit:csync2:*:*:*:*:*:*:*:*

part: a version: * update: *

VendorLinbit (87fa4084-c27c-5cb8-a59d-27a1da8fb988)
ProductCsync2 (24ac53cc-507e-57b8-aa7d-c3ae0cb820bb)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from purl2cpe mapping

PURL mappings

PURLSourceLast updated
pkg:deb/debian/csync2 purl2cpe 2026-06-01 10:15:29.743125
pkg:deb/ubuntu/csync2 purl2cpe 2026-06-01 10:15:29.743129
pkg:github/linbit/csync2 purl2cpe 2026-06-01 10:15:29.743132
pkg:rpm/fedora/csync2 purl2cpe 2026-06-01 10:15:29.743136
pkg:rpm/opensuse/csync2 purl2cpe 2026-06-01 10:15:29.743139

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2019-15523 vulnerable 2026-06-08 05:12:57.528786 Details available
An issue was discovered in LINBIT csync2 through 2.0. It does not correctly check for the return value GNUTLS_E_WARNING_ALERT_RECEIVED of the gnutls_handshake() function. It neglects to call this function again, as required by the design of the API.
Published: 2020-12-30T20:04:16.000Z
Updated: 2024-08-05T00:49:13.597Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2019-15522 vulnerable 2026-06-08 05:12:57.528362 Details available
An issue was discovered in LINBIT csync2 through 2.0. csync_daemon_session in daemon.c neglects to force a failure of a hello command when the configuration requires use of SSL.
Published: 2020-03-20T20:24:41.000Z
Updated: 2024-08-05T00:49:13.549Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.