The _gnutls_x509_verify_certificate function in lib/x509/verify.c in libgnutls in GnuTLS before 2.6.1 trusts certificate chains in which the last certificate is an arbitrary trusted, self-signed certificate, which allows man-in-the-middle attackers to insert a spoofed certificate for any Distinguished Name (DN).
CVSS Details
- CVSS 3.1 Base Score: 5.9
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Centos_linux | — | Upgrade gnutls-utilsUpgrade gnutlsUpgrade gnutls-devel | Dec 1, 2016 | Nov 12, 2008 |
| Freebsd | — | Upgrade gnutls | Dec 10, 2025 | Nov 16, 2008 |
| Gentoo Linux | — | Upgrade net-libs/gnutls. | Oct 30, 2017 | Nov 12, 2008 |
| Oracle_linux | — | Upgrade gnutls-develUpgrade gnutlsUpgrade gnutls-utils | Oct 16, 2024 | Nov 13, 2008 |
| Suse | — | Upgrade libgnutls30-32bitUpgrade gnutlsUpgrade libgnutls-devel-docUpgrade libgnutls-dane0Upgrade libgnutls-extra-develUpgrade libgnutls28-32bitUpgrade libgnutls28Upgrade libgnutls26Upgrade libgnutls26-x86Upgrade libgnutls-openssl27Upgrade libgnutlsxx30Upgrade libgnutlsxx28Upgrade libgnutls30Upgrade libgnutls-develUpgrade libgnutls26-32bitUpgrade libgnutls-extra26Upgrade libgnutlsxx-develUpgrade libgnutls-openssl-devel | Feb 17, 2015 | Jun 28, 2013 |
| Ubuntu | — | Upgrade libgnutls26Upgrade libgnutls12Upgrade libgnutls13 | Nov 8, 2024 | Nov 13, 2008 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub