What was the CVE for that cleartext downgrade attack ? | Hacker News

Hacker Newsnew | past | comments | ask | show | jobs | submit

		worthless-trash on Nov 28, 2024 \| parent \| context \| favorite \| on: Emacs arbitrary code execution and how to avoid it What was the CVE for that cleartext downgrade attack ?

stackghost on Nov 28, 2024 [–]

For gnutls? I believe it was this one: https://nvd.nist.gov/vuln/detail/CVE-2020-13777

It was not a "downgrade attack", it was passive cleartext recovery.

worthless-trash on Nov 29, 2024 | [–]

Ah, my mistake, thats why I couldn't find it. Thanks for the link.

Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact