Medium
Security advisory
Mutt before 1.14.4 and NeoMutt before 2020-06-19 have a STARTTLS buffering issue that affects IMAP, SMTP, and POP3. When a server sends a "begin TLS" response, the client reads additional data (e.g., from a man-in-the-middle attacker) and evaluates it in a TLS context, aka "response injection."
- Products
- Not specified
- Affected versions
- Not specified
- Fixed versions
- Not specified
- CVEs
- CVE-2020-14954
- Confirmed fixed CVEs
- Not specified
- Updated in this feed
- 1 Nov 2026, 09:05 UTC · Revision 1
Source evidence
Mutt before 1.14.4 and NeoMutt before 2020-06-19 have a STARTTLS buffering issue that affects IMAP, SMTP, and POP3. When a server sends a "begin TLS" response, the client reads additional data (e.g., from a man-in-the-middle attacker) and evaluates it in a TLS context, aka "response injection."
osv:CVE-2020-14954
Complete source record
{
"id": "9785ab032c8bd6ae638db4c434ad08f29cfe7826ba1a7113c102d1c0a0e0ccdd",
"url": "https://osv.dev/vulnerability/CVE-2020-14954",
"method": "structured",
"payload": {
"kind": "advisory",
"title": "CVE-2020-14954",
"summary": "Mutt before 1.14.4 and NeoMutt before 2020-06-19 have a STARTTLS buffering issue that affects IMAP, SMTP, and POP3. When a server sends a \"begin TLS\" response, the client reads additional data (e.g., from a man-in-the-middle attacker) and evaluates it in a TLS context, aka \"response injection.\"",
"evidence": "osv:CVE-2020-14954",
"products": [],
"severity": "medium",
"structured": {
"id": "CVE-2020-14954",
"aliases": [
"CVE-2020-14954"
],
"metrics": [
{
"type": "CVSS_V3",
"score": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N"
}
],
"affected": [
{
"ranges": [
{
"repo": "https://github.com/muttmua/mutt",
"type": "GIT",
"events": [
{
"introduced": "0"
},
{
"fixed": "c94d2b00f41cc7eb2504efc0aeb12646aefb2837"
}
],
"database_specific": {
"extracted_events": [
{
"cpe": "cpe:2.3:a:mutt:mutt:*:*:*:*:*:*:*:*",
"range": [
{
"introduced": "0"
},
{
"fixed": "1.14.4"
}
],
"source": "CPE_RANGE"
}
]
}
}
],
"versions": [
"mutt-1-14-3-rel",
"mutt-1-14-2-rel",
"mutt-1-14-1-rel",
"mutt-1-14-rel",
"mutt-1-13-rel",
"mutt-1-12-rel",
"mutt-1-11-rel",
"mutt-1-10-rel",
"mutt-1-9-rel",
"mutt-1-8-rel",
"mutt-1-7-rel",
"mutt-1-6-rel",
"mutt-1-5-24-rel",
"mutt-1-5-22-rel",
"mutt-1-5-21-rel",
"mutt-1-5-20-rel",
"mutt-1-5-19-rel",
"mutt-1-5-18-rel",
"mutt-1-5-17-rel",
"mutt-1-5-16-rel",
"mutt-1-5-15-rel",
"mutt-1-5-6-rel",
"mutt-1-5-5-1-rel",
"mutt-1-5-5-rel",
"post-type-punning-patch",
"pre-type-punning-patch",
"mutt-1-5-4-rel",
"mutt-1-5-3-rel",
"mutt-1-5-2-rel",
"mutt-1-5-1-rel",
"mutt-1-3-27-rel",
"mutt-1-3-26-rel",
"mutt-1-3-25-rel",
"mutt-1-3-24-rel",
"mutt-1-3-23-2-rel",
"mutt-1-3-23-1-rel",
"mutt-1-3-23-rel",
"mutt-1-3-22-1-rel",
"mutt-1-3-22-rel",
"mutt-1-3-21-rel",
"mutt-1-3-20-rel",
"mutt-1-3-19-rel",
"mutt-1-3-18-rel",
"mutt-1-3-17-rel",
"mutt-1-3-16-rel",
"mutt-1-3-15-rel",
"mutt-1-3-14-rel",
"mutt-1-3-13-rel",
"mutt-1-3-12-rel",
"mutt-1-3-11-rel",
"mutt-1-3-10-rel",
"mutt-1-3-9-rel",
"mutt-1-3-8-rel",
"mutt-1-3-7-rel",
"mutt-1-3-6-rel",
"mutt-1-3-5-rel",
"mutt-1-3-4-rel",
"mutt-1-3-3-rel",
"mutt-1-3-2-rel",
"mutt-1-3-1-rel",
"mutt-1-3-rel",
"mutt-1-1-14-rel",
"mutt-1-1-13-rel",
"mutt-1-1-12-rel",
"mutt-1-1-11-rel",
"mutt-1-1-10-rel",
"mutt-1-1-9-rel",
"mutt-1-1-8-rel",
"mutt-1-1-7-rel",
"mutt-1-1-6-rel",
"mutt-1-1-5-rel",
"mutt-1-1-4-rel",
"mutt-1-1-3-rel",
"mutt-1-1-2-rel",
"mutt-1-1-1-2-rel",
"mutt-1-1-1-1-rel",
"mutt-1-1-1-rel",
"mutt-1-1-rel",
"mutt-0-96-8-rel",
"mutt-0-96-7-rel",
"mutt-0-96-6-rel",
"mutt-0-96-5-rel",
"mutt-0-96-4-rel",
"mutt-0-96-3-rel",
"mutt-0-96-2-slightly-post-release",
"mutt-0-96-1-rel",
"mutt-0-96-rel",
"mutt-0-95-rel",
"mutt-0-94-18-rel",
"mutt-0-94-17i-rel",
"mutt-0-94-16i-rel",
"mutt-0-94-15-rel",
"mutt-0-94-14-rel",
"mutt-0-94-13-rel",
"mutt-0-94-10i-rel",
"mutt-0-94-9i-p1",
"mutt-0-94-9i-rel",
"mutt-0-94-8i-rel",
"mutt-0-94-7i-rel",
"mutt-0-94-6i-rel",
"mutt-0-94-5i-rel",
"mutt-0-93-unstable",
"mutt-0-92-11i",
"mutt-0-92-10i",
"mutt-0-92-9i"
],
"database_specific": {
"source": "https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2020-14954.json"
}
},
{
"ranges": [
{
"repo": "https://github.com/neomutt/neomutt",
"type": "GIT",
"events": [
{
"introduced": "0"
},
{
"fixed": "20200619"
},
{
"fixed": "fb013ec666759cb8a9e294347c7b4c1f597639cc"
},
{
"fixed": "9014e6d34e0f77cf1ced7531ef82a8e7c25817b4"
}
],
"database_specific": {
"extracted_events": [
{
"cpe": "cpe:2.3:a:neomutt:neomutt:*:*:*:*:*:*:*:*",
"range": [
{
"introduced": "0"
},
{
"fixed": "20200619"
}
],
"source": "CPE_RANGE"
},
{
"range": [
{
"fixed": "fb013ec666759cb8a9e294347c7b4c1f597639cc"
}
],
"source": "REFERENCES_COMMIT"
},
{
"range": [
{
"fixed": "9014e6d34e0f77cf1ced7531ef82a8e7c25817b4"
}
],
"source": "REFERENCES_TAG",
"original_tag": "20200619"
}
]
}
}
],
"versions": [
"20200501",
"20200424",
"20200417",
"20200320",
"20200313",
"20191207",
"20191129",
"20191111",
"20191102",
"2019-10-25",
"neomutt-20180716",
"neomutt-20180622",
"neomutt-20180512",
"neomutt-20180323",
"neomutt-20180223",
"neomutt-20171215",
"neomutt-20171208",
"neomutt-20171027",
"neomutt-20171013",
"neomutt-20171006",
"neomutt-20170912",
"neomutt-20170907",
"neomutt-20170714",
"neomutt-20170707",
"neomutt-20170609",
"neomutt-20170602",
"neomutt-20170526",
"neomutt-20170428",
"neomutt-20170421",
"neomutt-20170414",
"neomutt-20170306",
"neomutt-20170225",
"neomutt-20170206",
"neomutt-20170128",
"neomutt-20170113",
"neomutt-20161126",
"neomutt-20161104",
"neomutt-20161028",
"neomutt-20161014",
"neomutt-20161003",
"neomutt-20161002",
"neomutt-20160916",
"neomutt-20160910",
"neomutt-20160827",
"neomutt-20160822"
],
"database_specific": {
"source": "https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2020-14954.json",
"vanir_signatures": [
{
"id": "CVE-2020-14954-1e963bbf",
"digest": {
"length": 1941,
"function_hash": "44992668075714321893057665795727764418"
},
"source": "https://github.com/neomutt/neomutt/commit/fb013ec666759cb8a9e294347c7b4c1f597639cc",
"target": {
"file": "imap/imap.c",
"function": "imap_open_connection"
},
"deprecated": false,
"signature_type": "Function",
"signature_version": "v1"
},
{
"id": "CVE-2020-14954-27b6fac3",
"digest": {
"threshold": 0.9,
"line_hashes": [
"236753248965281992922722005274229441904",
"148313658709422087785498987586679668760",
"66666345422237146144222389054324477406",
"312383068827093376146995620522654092375"
]
},
"source": "https://github.com/neomutt/neomutt/commit/fb013ec666759cb8a9e294347c7b4c1f597639cc",
"target": {
"file": "smtp.c"
},
"deprecated": false,
"signature_type": "Line",
"signature_version": "v1"
},
{
"id": "CVE-2020-14954-2f7783f3",
"digest": {
"threshold": 0.9,
"line_hashes": [
"195892384089387407122844999843074655976",
"241784455253745484313712968342155088130",
"132651310569114454378534891346233694192",
"233223301110599527104956408247214654033"
]
},
"source": "https://github.com/neomutt/neomutt/commit/fb013ec666759cb8a9e294347c7b4c1f597639cc",
"target": {
"file": "nntp/nntp.c"
},
"deprecated": false,
"signature_type": "Line",
"signature_version": "v1"
},
{
"id": "CVE-2020-14954-5551168a",
"digest": {
"threshold": 0.9,
"line_hashes": [
"228199153325695400052032153300510996890",
"66439340510563616087624374326378596928",
"247269268377050723330110519794783159122",
"16134682384211218054282201067285465822"
]
},
"source": "https://github.com/neomutt/neomutt/commit/fb013ec666759cb8a9e294347c7b4c1f597639cc",
"target": {
"file": "pop/pop_lib.c"
},
"deprecated": false,
"signature_type": "Line",
"signature_version": "v1"
},
{
"id": "CVE-2020-14954-5c3bf9c4",
"digest": {
"threshold": 0.9,
"line_hashes": [
"307331709257669031545039989435500192634",
"171239241256085084219501049372157687846",
"62850679139230278844682671082953221608",
"60896392166792266394891751863172980401"
]
},
"source": "https://github.com/neomutt/neomutt/commit/fb013ec666759cb8a9e294347c7b4c1f597639cc",
"target": {
"file": "conn/socket.h"
},
"deprecated": false,
"signature_type": "Line",
"signature_version": "v1"
},
{
"id": "CVE-2020-14954-665fb6d0",
"digest": {
"threshold": 0.9,
"line_hashes": [
"196472896472400386691796374089208180702",
"60040772488398434283429044078168517878",
"206078758818106128215695582181177286043",
"235994231975520507873981987597379569395",
"237628480328063291927886699851479387200",
"192869104413734524237180789805395601385",
"247052858317911412431437426978405579400"
]
},
"source": "https://github.com/neomutt/neomutt/commit/fb013ec666759cb8a9e294347c7b4c1f597639cc",
"target": {
"file": "imap/command.c"
},
"deprecated": false,
"signature_type": "Line",
"signature_version": "v1"
},
{
"id": "CVE-2020-14954-6a01760e",
"digest": {
"length": 887,
"function_hash": "162166934862861220235681767039508031212"
},
"source": "https://github.com/neomutt/neomutt/commit/fb013ec666759cb8a9e294347c7b4c1f597639cc",
"target": {
"file": "imap/command.c",
"function": "imap_exec"
},
"deprecated": false,
"signature_type": "Function",
"signature_version": "v1"
},
{
"id": "CVE-2020-14954-a6b6440e",
"digest": {
"length": 1825,
"function_hash": "267361969920487025611144160917627970084"
},
"source": "https://github.com/neomutt/neomutt/commit/fb013ec666759cb8a9e294347c7b4c1f597639cc",
"target": {
"file": "pop/pop_lib.c",
"function": "pop_open_connection"
},
"deprecated": false,
"signature_type": "Function",
"signature_version": "v1"
},
{
"id": "CVE-2020-14954-a9e19c97",
"digest": {
"threshold": 0.9,
"line_hashes": [
"322973470093828194128000706283655668590",
"300161726902115777482238072438353336228",
"104090465928353823593562893093606976460",
"61175173592837600351900588900970542665"
]
},
"source": "https://github.com/neomutt/neomutt/commit/fb013ec666759cb8a9e294347c7b4c1f597639cc",
"target": {
"file": "imap/imap.c"
},
"deprecated": false,
"signature_type": "Line",
"signature_version": "v1"
},
{
"id": "CVE-2020-14954-ad92f25c",
"digest": {
"length": 1073,
"function_hash": "331562114280994771562968139455818509618"
},
"source": "https://github.com/neomutt/neomutt/commit/fb013ec666759cb8a9e294347c7b4c1f597639cc",
"target": {
"file": "smtp.c",
"function": "smtp_open"
},
"deprecated": false,
"signature_type": "Function",
"signature_version": "v1"
},
{
"id": "CVE-2020-14954-b6ab625f",
"digest": {
"length": 2750,
"function_hash": "268643368371455374646142094818380220938"
},
"source": "https://github.com/neomutt/neomutt/commit/fb013ec666759cb8a9e294347c7b4c1f597639cc",
"target": {
"file": "nntp/nntp.c",
"function": "nntp_open_connection"
},
"deprecated": false,
"signature_type": "Function",
"signature_version": "v1"
}
],
"vanir_signatures_modified": "2026-10-24T14:06:20Z"
}
},
{
"ranges": [
{
"repo": "https://gitlab.com/muttmua/mutt",
"type": "GIT",
"events": [
{
"introduced": "0"
},
{
"fixed": "20200619"
},
{
"fixed": "c94d2b00f41cc7eb2504efc0aeb12646aefb2837"
},
{
"fixed": "c547433cdf2e79191b15c6932c57f1472bfb5ff4"
}
],
"database_specific": {
"extracted_events": [
{
"cpe": "cpe:2.3:a:neomutt:neomutt:*:*:*:*:*:*:*:*",
"range": [
{
"introduced": "0"
},
{
"fixed": "20200619"
}
],
"source": "CPE_RANGE"
},
{
"cpe": "cpe:2.3:a:mutt:mutt:*:*:*:*:*:*:*:*",
"range": [
{
"introduced": "0"
},
{
"fixed": "1.14.4"
}
],
"source": "CPE_RANGE"
},
{
"range": [
{
"fixed": "c547433cdf2e79191b15c6932c57f1472bfb5ff4"
}
],
"source": "REFERENCES_COMMIT"
}
]
}
}
],
"versions": [
"mutt-1-14-3-rel",
"mutt-1-14-2-rel",
"mutt-1-14-1-rel",
"mutt-1-14-rel",
"mutt-1-13-rel",
"mutt-1-12-rel",
"mutt-1-11-rel",
"mutt-1-10-rel",
"mutt-1-9-rel",
"mutt-1-8-rel",
"mutt-1-7-rel",
"mutt-1-6-rel",
"mutt-1-5-24-rel",
"mutt-1-5-22-rel",
"mutt-1-5-21-rel",
"mutt-1-5-20-rel",
"mutt-1-5-19-rel",
"mutt-1-5-18-rel",
"mutt-1-5-17-rel",
"mutt-1-5-16-rel",
"mutt-1-5-15-rel",
"mutt-1-5-6-rel",
"mutt-1-5-5-1-rel",
"mutt-1-5-5-rel",
"post-type-punning-patch",
"pre-type-punning-patch",
"mutt-1-5-4-rel",
"mutt-1-5-3-rel",
"mutt-1-5-2-rel",
"mutt-1-5-1-rel",
"mutt-1-3-27-rel",
"mutt-1-3-26-rel",
"mutt-1-3-25-rel",
"mutt-1-3-24-rel",
"mutt-1-3-23-2-rel",
"mutt-1-3-23-1-rel",
"mutt-1-3-23-rel",
"mutt-1-3-22-1-rel",
"mutt-1-3-22-rel",
"mutt-1-3-21-rel",
"mutt-1-3-20-rel",
"mutt-1-3-19-rel",
"mutt-1-3-18-rel",
"mutt-1-3-17-rel",
"mutt-1-3-16-rel",
"mutt-1-3-15-rel",
"mutt-1-3-14-rel",
"mutt-1-3-13-rel",
"mutt-1-3-12-rel",
"mutt-1-3-11-rel",
"mutt-1-3-10-rel",
"mutt-1-3-9-rel",
"mutt-1-3-8-rel",
"mutt-1-3-7-rel",
"mutt-1-3-6-rel",
"mutt-1-3-5-rel",
"mutt-1-3-4-rel",
"mutt-1-3-3-rel",
"mutt-1-3-2-rel",
"mutt-1-3-1-rel",
"mutt-1-3-rel",
"mutt-1-1-14-rel",
"mutt-1-1-13-rel",
"mutt-1-1-12-rel",
"mutt-1-1-11-rel",
"mutt-1-1-10-rel",
"mutt-1-1-9-rel",
"mutt-1-1-8-rel",
"mutt-1-1-7-rel",
"mutt-1-1-6-rel",
"mutt-1-1-5-rel",
"mutt-1-1-4-rel",
"mutt-1-1-3-rel",
"mutt-1-1-2-rel",
"mutt-1-1-1-2-rel",
"mutt-1-1-1-1-rel",
"mutt-1-1-1-rel",
"mutt-1-1-rel",
"mutt-0-96-8-rel",
"mutt-0-96-7-rel",
"mutt-0-96-6-rel",
"mutt-0-96-5-rel",
"mutt-0-96-4-rel",
"mutt-0-96-3-rel",
"mutt-0-96-2-slightly-post-release",
"mutt-0-96-1-rel",
"mutt-0-96-rel",
"mutt-0-95-rel",
"mutt-0-94-18-rel",
"mutt-0-94-17i-rel",
"mutt-0-94-16i-rel",
"mutt-0-94-15-rel",
"mutt-0-94-14-rel",
"mutt-0-94-13-rel",
"mutt-0-94-10i-rel",
"mutt-0-94-9i-p1",
"mutt-0-94-9i-rel",
"mutt-0-94-8i-rel",
"mutt-0-94-7i-rel",
"mutt-0-94-6i-rel",
"mutt-0-94-5i-rel",
"mutt-0-93-unstable",
"mutt-0-92-11i",
"mutt-0-92-10i",
"mutt-0-92-9i"
],
"database_specific": {
"source": "https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2020-14954.json",
"vanir_signatures": [
{
"id": "CVE-2020-14954-57a58ee4",
"digest": {
"length": 2406,
"function_hash": "3924893623696282984031067475760628486"
},
"source": "https://gitlab.com/muttmua/mutt@c547433cdf2e79191b15c6932c57f1472bfb5ff4",
"target": {
"file": "mutt_ssl.c",
"function": "mutt_ssl_starttls"
},
"deprecated": false,
"signature_type": "Function",
"signature_version": "v1"
},
{
"id": "CVE-2020-14954-5e6ba7de",
"digest": {
"threshold": 0.9,
"line_hashes": [
"220009596432518087481277674940495787568",
"219524305078317464263044700899935190261",
"85529289398689296017134109923965014091",
"29496026359297498989424405448808859555"
]
},
"source": "https://gitlab.com/muttmua/mutt@c547433cdf2e79191b15c6932c57f1472bfb5ff4",
"target": {
"file": "mutt_socket.h"
},
"deprecated": false,
"signature_type": "Line",
"signature_version": "v1"
},
{
"id": "CVE-2020-14954-6579b0b3",
"digest": {
"length": 289,
"function_hash": "100829173116190600858159645461328931119"
},
"source": "https://gitlab.com/muttmua/mutt@c547433cdf2e79191b15c6932c57f1472bfb5ff4",
"target": {
"file": "mutt_ssl_gnutls.c",
"function": "mutt_ssl_starttls"
},
"deprecated": false,
"signature_type": "Function",
"signature_version": "v1"
},
{
"id": "CVE-2020-14954-72f169ff",
"digest": {
"threshold": 0.9,
"line_hashes": [
"188497607745055877459878591124861724843",
"293150522518363429545752787994509039533",
"333420326018441820831316304765230543074"
]
},
"source": "https://gitlab.com/muttmua/mutt@c547433cdf2e79191b15c6932c57f1472bfb5ff4",
"target": {
"file": "mutt_ssl.c"
},
"deprecated": false,
"signature_type": "Line",
"signature_version": "v1"
},
{
"id": "CVE-2020-14954-7736d919",
"digest": {
"threshold": 0.9,
"line_hashes": [
"195169622976178384685312765189902567523",
"144496850903660620582356269248905645793",
"118627108049108073556564599796214648056",
"242834342463301710076991533363548928466"
]
},
"source": "https://gitlab.com/muttmua/mutt@c547433cdf2e79191b15c6932c57f1472bfb5ff4",
"target": {
"file": "mutt_ssl_gnutls.c"
},
"deprecated": false,
"signature_type": "Line",
"signature_version": "v1"
},
{
"id": "CVE-2020-14954-a960bb0e",
"digest": {
"threshold": 0.9,
"line_hashes": [
"142098375908311935035689897214063071626",
"269862614409702674060039833485377731210",
"232483895511340113153063965403749246449"
]
},
"source": "https://gitlab.com/muttmua/mutt@c547433cdf2e79191b15c6932c57f1472bfb5ff4",
"target": {
"file": "mutt_socket.c"
},
"deprecated": false,
"signature_type": "Line",
"signature_version": "v1"
}
],
"vanir_signatures_modified": "2026-10-24T14:06:20Z"
}
}
],
"modified": "2026-10-24T14:06:20.591098693Z",
"provider": "osv",
"references": [
"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/EFMEILCBKMZRRZDMUGWLVN4PQQ4VTAZE/",
"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/K3LXFVPTLK4PNHL6MPKJNJQJ25CH7GLQ/",
"https://github.com/neomutt/neomutt/releases/tag/20200619",
"https://lists.debian.org/debian-lts-announce/2020/06/msg00039.html",
"https://lists.debian.org/debian-lts-announce/2020/06/msg00040.html",
"https://security.gentoo.org/glsa/202007-57",
"https://usn.ubuntu.com/4403-1/",
"https://www.debian.org/security/2020/dsa-4707",
"https://www.debian.org/security/2020/dsa-4708",
"https://gitlab.com/muttmua/mutt/-/issues/248",
"https://github.com/neomutt/neomutt/commit/fb013ec666759cb8a9e294347c7b4c1f597639cc",
"https://gitlab.com/muttmua/mutt/-/commit/c547433cdf2e79191b15c6932c57f1472bfb5ff4"
],
"provider_metadata": {
"unresolved_ranges": [
{
"cpes": [
"cpe:2.3:o:canonical:ubuntu_linux:12.04:*:*:*:-:*:*:*",
"cpe:2.3:o:canonical:ubuntu_linux:16.04:*:*:*:esm:*:*:*",
"cpe:2.3:o:canonical:ubuntu_linux:18.04:*:*:*:lts:*:*:*",
"cpe:2.3:o:canonical:ubuntu_linux:19.10:*:*:*:*:*:*:*",
"cpe:2.3:o:canonical:ubuntu_linux:20.04:*:*:*:lts:*:*:*"
],
"vendor_product": "canonical:ubuntu_linux",
"extracted_events": [
{
"range": [
{
"introduced": "12.04"
},
{
"last_affected": "12.04"
},
{
"introduced": "16.04"
},
{
"last_affected": "16.04"
},
{
"introduced": "18.04"
},
{
"last_affected": "18.04"
},
{
"introduced": "19.10"
},
{
"last_affected": "19.10"
},
{
"introduced": "20.04"
},
{
"last_affected": "20.04"
}
],
"source": "CPE_STRING"
}
]
},
{
"cpes": [
"cpe:2.3:o:debian:debian_linux:10.0:*:*:*:*:*:*:*",
"cpe:2.3:o:debian:debian_linux:8.0:*:*:*:*:*:*:*",
"cpe:2.3:o:debian:debian_linux:9.0:*:*:*:*:*:*:*"
],
"vendor_product": "debian:debian_linux",
"extracted_events": [
{
"range": [
{
"introduced": "9.0"
},
{
"last_affected": "9.0"
},
{
"introduced": "10.0"
},
{
"last_affected": "10.0"
},
{
"introduced": "8.0"
},
{
"last_affected": "8.0"
}
],
"source": "CPE_STRING"
}
]
},
{
"cpes": [
"cpe:2.3:o:fedoraproject:fedora:31:*:*:*:*:*:*:*",
"cpe:2.3:o:fedoraproject:fedora:32:*:*:*:*:*:*:*"
],
"vendor_product": "fedoraproject:fedora",
"extracted_events": [
{
"range": [
{
"introduced": "31"
},
{
"last_affected": "31"
},
{
"introduced": "32"
},
{
"last_affected": "32"
}
],
"source": "CPE_STRING"
}
]
},
{
"cpes": [
"cpe:2.3:o:opensuse:leap:15.1:*:*:*:*:*:*:*",
"cpe:2.3:o:opensuse:leap:15.2:*:*:*:*:*:*:*"
],
"vendor_product": "opensuse:leap",
"extracted_events": [
{
"range": [
{
"introduced": "15.1"
},
{
"last_affected": "15.1"
},
{
"introduced": "15.2"
},
{
"last_affected": "15.2"
}
],
"source": "CPE_STRING"
}
]
}
]
}
},
"related_cves": [
{
"value": "CVE-2020-14954",
"evidence": "/id"
}
],
"security_relevant": true,
"severity_evidence": "/severity/0/score"
},
"source_id": "core-osv",
"document_id": 443029,
"published_at": "2020-06-21T17:15:09.603+00:00"
}