This page lists publicly disclosed CVE vulnerabilities affecting linbit csync2 (linked via NVD CPE). Each row includes severity scores, summaries, and publication dates to help identify and analyze security issues.
| CVE | Summary | Source | Max CVSS | EPSS % | Published | Updated |
|---|---|---|---|---|---|---|
| CVE-2019-15523 | An issue was discovered in LINBIT csync2 through 2.0. It does not correctly check for the return value GNUTLS_E_WARNING_ALERT_RECEIVED of the gnutls_handshake() function. It neglects to call this function again, as required by the design of the API. | [email protected] | 5.3 | 1.31% | 2020-12-30 | 2026-06-17 |
| CVE-2019-15522 | An issue was discovered in LINBIT csync2 through 2.0. csync_daemon_session in daemon.c neglects to force a failure of a hello command when the configuration requires use of SSL. | [email protected] | 9.8 | 1.85% | 2020-03-20 | 2026-06-17 |