Read the docs

Io-socket-ssl

Records2All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical0CVSS 9.0–10.0
CVSS high0CVSS 7.0–8.9

Exploited now

Io-socket-ssl records in CISA KEV

No Io-socket-ssl vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records
Io-socket-ssl 2 records LOW

Records

2 records in Io-socket-ssl · all components

TI-2010-04067 CVE-2010-4334 · GHSA-rgc7-283p-45vh

The IO::Socket::SSL module 1.35 for Perl, when verify_mode is not VERIFY_NONE, fails open…

Priority LOW 22

The IO::Socket::SSL module 1.35 for Perl, when verify_mode is not VERIFY_NONE, fails open to VERIFY_NONE instead of throwing an error when a ca_file/ca_path cannot be verified, which allows remote attackers to bypass int…

CVSS 2.0MEDIUM 4.0 Network No auth Interaction — EPSS 0.01777 Published 2011-01-14 Will not fix CWE-310
TI-2009-02881 CVE-2009-3024 · GHSA-5v53-7q2j-vjr2

The verify_hostname_of_cert function in the certificate checking feature in IO-Socket-SSL…

Priority LOW 22

The verify_hostname_of_cert function in the certificate checking feature in IO-Socket-SSL (IO::Socket::SSL) 1.14 through 1.25 only matches the prefix of a hostname when no wildcard is used, which allows remote attackers…

CVSS 2.0MEDIUM 4.3 Network No auth Interaction — EPSS 0.00996 Published 2009-08-31 No fix listed CWE-310
Open these records in search →