lib/x509/verify.c in GnuTLS before 3.1.22 and 3.2.x before 3.2.12 does not properly handle unspecified errors when verifying X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers via a crafted certificate.
CVSS Details
- CVSS 3.1 Base Score: 5.9
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alpine Linux | — | Upgrade gnutls | Aug 30, 2017 | Mar 6, 2014 |
| Centos_linux | — | Upgrade gnutlsUpgrade gnutls-develUpgrade gnutls-utilsUpgrade gnutls-guile | Dec 1, 2016 | Mar 6, 2014 |
| Debian | — | Upgrade gnutls28Upgrade gnutls26 | Jul 30, 2024 | Mar 7, 2014 |
| Freebsd | — | Upgrade gnutls3Upgrade linux-f10-gnutlsUpgrade gnutls-develUpgrade gnutls | Dec 10, 2025 | Mar 4, 2014 |
| Gentoo Linux | — | Upgrade net-libs/gnutls. | Oct 30, 2017 | Mar 6, 2014 |
| Oracle Solaris | — | Upgrade library/gnutls to version 2.8.6-0.175.1.18.0.4.0 on Solaris 11.1Upgrade consolidation/desktop/desktop-incorporation to version 0.5.11-0.175.2.0.0.42.0 on Solaris 11.2 | May 29, 2017 | Mar 6, 2014 |
| Oracle_linux | — | Upgrade gnutls-guileUpgrade gnutlsUpgrade gnutls-utilsUpgrade gnutls-devel | Oct 16, 2024 | Mar 6, 2014 |
| Redhat_linux | — | No solution exists | Jul 9, 2025 | Mar 3, 2014 |
| Suse | — | Upgrade libgnutls-dane0Upgrade libgnutls-extra26Upgrade libgnutls26Upgrade libgnutlsxx-develUpgrade libgnutls30-32bitUpgrade libgnutls-develUpgrade libgnutls-openssl27Upgrade libgnutls30Upgrade libgnutlsxx28Upgrade gnutlsUpgrade libgnutls26-x86Upgrade libgnutls28-32bitUpgrade libgnutls-openssl-develUpgrade libgnutls26-32bitUpgrade libgnutls28Upgrade libgnutls-extra-devel | Dec 18, 2015 | Mar 4, 2014 |
| Ubuntu | — | Upgrade libgnutls26 | Nov 8, 2024 | Mar 7, 2014 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub