GnuTLS before 2.7.6, when the GNUTLS_VERIFY_ALLOW_X509_V1_CA_CRT flag is not enabled, treats version 1 X.509 certificates as intermediate CAs, which allows remote attackers to bypass intended restrictions by leveraging a X.509 V1 certificate from a trusted CA to issue new certificates, a different vulnerability than CVE-2014-1959.
CVSS Details
- CVSS 3.1 Base Score: 9.1
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Centos_linux | — | Upgrade gnutls-develUpgrade gnutlsUpgrade gnutls-utils | Dec 1, 2016 | Mar 6, 2014 |
| Oracle_linux | — | Upgrade gnutls-develUpgrade gnutls-utilsUpgrade gnutls | Oct 16, 2024 | Mar 6, 2014 |
| Redhat_linux | — | No solution exists | Jul 9, 2025 | Jan 9, 2009 |
| Suse | — | Upgrade libgnutls-extra26Upgrade libgnutls26-32bitUpgrade gnutlsUpgrade libgnutls-develUpgrade libgnutls-extra-develUpgrade libgnutls26Upgrade libgnutls26-x86 | Feb 17, 2015 | Feb 26, 2014 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub