← Vulnerability feed
Start free
Open in platform
Vulnerability record · CVE-2012-6709 · published 23 February 2018
CVE-2012-6709: Elinks improper certificate validation vulnerability
EElinks · Elinks
ELinks 0.12 and Twibright Links 2.3 have Missing SSL Certificate Validation.
5.9 CVSS 3.0 Medium EPSS 0.57% · top 55.1% CWE-295 · Improper certificate validation
5.9CVSS 3.0 base score, v2 4.3
0.57%EPSS exploitation probability, 30 days
NoNot in CISA KEV
2Affected product versions listed by NVD
4References
16 Jun 2026Last modified by NVD
Description
ELinks 0.12 and Twibright Links 2.3 have Missing SSL Certificate Validation.
CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N
Affected products
2 vulnerable configurations from NVD's CPE data, grouped by vendor and product.
References
| Link | Tags |
|---|---|
| https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=694658 | Issue TrackingThird Party Advisory |
| https://bugzilla.redhat.com/show_bug.cgi?id=881399 | Issue TrackingPatch |
| https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=694658 | Issue TrackingThird Party Advisory |
| https://bugzilla.redhat.com/show_bug.cgi?id=881399 | Issue TrackingPatch |
Track CVE-2012-6709 inside VULONE
Watch it alongside the ransomware crews, C2 infrastructure and forum chatter that reference it, query it through the API and pull it into your SIEM over TAXII.
Related vulnerabilities
Same products first, then exploited flaws of the same weakness class.
9.3CVE-2008-3329Twibright links link following vulnerabilityUnspecified vulnerability in Links before 2.1, when "only proxies" is enabled, has unknown impact and attack vectors related to providing "URLs to ex…EPSS 1.2%7.8CVE-2008-7224Elinks memory buffer overflow vulnerabilityBuffer overflow in entity_cache in ELinks before 0.11.4rc0 allows remote attackers to cause a denial of service (crash) via a crafted link.EPSS 2.8%7.5CVE-2006-5925Elinks vulnerabilityLinks web browser 1.00pre12 and Elinks 0.9.2 with smbclient installed allows remote attackers to execute arbitrary code via shell metacharacters in a…EPSS 8.3%5.5CVE-2017-11114Twibright links out-of-bounds read vulnerabilityThe put_chars function in html_r.c in Twibright Links 2.14 allows remote attackers to cause a denial of service (buffer over-read) via a crafted HTML…EPSS 0.89%5.1CVE-2012-4545Elinks improper authentication vulnerabilityThe http_negotiate_create_context function in protocol/http/http_negotiate.c in ELinks 0.12 before 0.12pre6, when using HTTP Negotiate or GSS-Negotia…EPSS 1.9%5.0CVE-2002-1405Elinks vulnerabilityCRLF injection vulnerability in Lynx 2.8.4 and earlier allows remote attackers to inject false HTTP headers into an HTTP request that is provided on …EPSS 5.0%4.4CVE-2007-2027Elinks vulnerabilityUntrusted search path vulnerability in the add_filename_to_string function in intl/gettext/loadmsgcat.c for Elinks 0.11.1 allows local users to cause…EPSS 0.84%4.3CVE-2013-6050Twibright links vulnerabilityInteger overflow in Links before 2.8 allows remote attackers to cause a denial of service (crash) via crafted HTML tables.EPSS 1.2%
Source: NIST National Vulnerability Database (record CVE-2012-6709), CISA KEV, FIRST EPSS (scores of 2026-09-26). This page is refreshed as NVD updates the record.
