3 ms·
Speculation time I went on a brief hunt for more information about this, and there seems to be a cluster of CVEs created 4 days ago around improper validation
by yourad_io 12y ago
Speculation time
I went on a brief hunt for more information about this, and there seems to be a cluster of CVEs created 4 days ago around improper validation of X.509 certificates in android (and libgadu), allowing MitM. If this is it, it is nowhere near the severity of heartbleed.
libgadu:
http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2013-4488 http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2013-448...
many android apps:
http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2014-6887 http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2014-688...
http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2014-6891 http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2014-689...
http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2014-6904 http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2014-690...
http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2014-6934 http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2014-693...
http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2014-6935 http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2014-693...
http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2014-6936 http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2014-693...
http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2014-6937 http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2014-693...
http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2014-6938 http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2014-693...
http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2014-6939 http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2014-693...
http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2014-6940 http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2014-694...
http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2014-6941 http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2014-694...
http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2014-7046 http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2014-704...
http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2014-7047 http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2014-704...