CVE-2014-5444
EPSS 1.1%
Description
Geary before 0.6.3 does not present the user with a warning when a TLS certificate error is detected, which makes it easier for remote attackers to conduct man-in-the-middle attacks via a crafted certificate.
How to fix CVE-2014-5444
To remediate CVE-2014-5444, upgrade the affected package to a fixed version below.
- Debian/geary—upgrade to 0.6.3-1 or later
Is CVE-2014-5444 being exploited?
Low — EPSS is 1.1%, meaning exploitation activity has not been observed at scale.
Affected packages (1)
- from 0, < 0.6.3-1