Search for packages
| purl | pkg:deb/debian/sendmail@8.17.1.9-2%2Bdeb12u2 |
| Vulnerability | Summary | Fixed by |
|---|---|---|
| This package is not known to be affected by vulnerabilities. | ||
| Vulnerability | Summary | Aliases |
|---|---|---|
| VCID-naz4-k1th-aaad | ALPACA is an application layer protocol content confusion attack, exploiting TLS servers implementing different protocols but using compatible certificates, such as multi-domain or wildcard certificates. A MiTM attacker having access to victim's traffic at the TCP/IP layer can redirect traffic from one subdomain to another, resulting in a valid TLS session. This breaks the authentication of TLS and cross-protocol attacks may be possible where the behavior of one protocol service may compromise the other at the application layer. |
CVE-2021-3618
|
| Date | Actor | Action | Vulnerability | Source | VulnerableCode Version |
|---|---|---|---|---|---|
| 2025-06-21T16:12:19.873633+00:00 | Debian Importer | Fixing | VCID-naz4-k1th-aaad | https://security-tracker.debian.org/tracker/data/json | 36.1.3 |
| 2025-04-05T12:38:25.147399+00:00 | Debian Importer | Fixing | VCID-naz4-k1th-aaad | https://security-tracker.debian.org/tracker/data/json | 36.0.0 |
| 2025-02-20T02:34:38.840474+00:00 | Debian Importer | Fixing | VCID-naz4-k1th-aaad | https://security-tracker.debian.org/tracker/data/json | 35.1.0 |
| 2024-11-22T20:29:09.083113+00:00 | Debian Importer | Fixing | VCID-naz4-k1th-aaad | https://security-tracker.debian.org/tracker/data/json | 35.0.0 |
| 2024-10-09T19:07:16.441290+00:00 | Debian Importer | Fixing | VCID-naz4-k1th-aaad | https://security-tracker.debian.org/tracker/data/json | 34.0.2 |
| 2024-09-19T03:28:50.406606+00:00 | Debian Importer | Fixing | VCID-naz4-k1th-aaad | https://security-tracker.debian.org/tracker/data/json | 34.0.1 |