The "record packet parsing" in GnuTLS 1.2 before 1.2.3 and 1.0 before 1.0.25 allows remote attackers to cause a denial of service, possibly related to padding bytes in gnutils_cipher.c.
CVSS Details
- CVSS 3.1 Base Score: 5.3
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Gentoo Linux | — | Upgrade net-libs/gnutls. | Oct 30, 2017 | May 3, 2005 |
| Suse | — | Upgrade libredcarpetUpgrade red-carpetUpgrade rugUpgrade rcd-develUpgrade rcd-modulesUpgrade gnutlsUpgrade libredcarpet-pythonUpgrade rcd-modules-develUpgrade libredcarpet-toolsUpgrade libsoup-develUpgrade libsoupUpgrade gnutls-develUpgrade rcd | Dec 12, 2013 | May 3, 2005 |
| Ubuntu | — | Upgrade libgnutls10 | Nov 8, 2024 | May 3, 2005 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub