Posted by John Goerzen on Nov 01 A recent code quality sweep and audit uncovered multiple vulnerabilities in C-Kermit, some of which can lead to an RCE when working with a malicious peer. They have been condensed into 3 advisories, and are awaiting CVE allocation. The three are: Remote code execution in C-Kermit https://github.com/OpenKermit/ckermit/security/advisories/GHSA-c5px-7h4c-gj8p Auth bypass and TLS cert spoofing...

Read the full article at oss-security →