gnutls_cipher.c in libgnutls in GnuTLS before 2.12.17 and 3.x before 3.0.15 does not properly handle data encrypted with a block cipher, which allows remote attackers to cause a denial of service (heap memory corruption and application crash) via a crafted record, as demonstrated by a crafted GenericBlockCipher structure.
CVSS Details
- CVSS 3.1 Base Score: 5.3
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alpine Linux | — | Upgrade gnutls | Aug 30, 2017 | Mar 26, 2012 |
| Centos_linux | — | Upgrade gnutls-utilsUpgrade gnutls-guileUpgrade gnutlsUpgrade gnutls-devel | Dec 1, 2016 | Mar 26, 2012 |
| Debian | — | Upgrade gnutls28 | Jul 30, 2024 | Mar 26, 2012 |
| Freebsd | — | Upgrade gnutlsUpgrade gnutls-devel | Dec 10, 2025 | Mar 21, 2012 |
| Gentoo Linux | — | Upgrade net-libs/gnutls. | Oct 30, 2017 | Mar 26, 2012 |
| Oracle Solaris | — | Upgrade library/gnutls to version 2.8.6-0.175.1.8.0.2.0 on Solaris 11.1Upgrade consolidation/desktop/desktop-incorporation to version 0.5.11-0.175.2.0.0.42.0 on Solaris 11.2 | May 29, 2017 | Mar 26, 2012 |
| Oracle_linux | — | Upgrade gnutls-guileUpgrade gnutls-utilsUpgrade gnutlsUpgrade gnutls-devel | Oct 16, 2024 | Mar 26, 2012 |
| Redhat_linux | — | No solution exists | Jul 9, 2025 | Mar 21, 2012 |
| Suse | — | Upgrade libgnutls-extra-develUpgrade libgnutls30Upgrade libgnutls30-32bitUpgrade libgnutlsxx28Upgrade libgnutls-dane0Upgrade libgnutls26-x86Upgrade gnutlsUpgrade libgnutls-openssl27Upgrade libgnutls-openssl-develUpgrade libgnutls26Upgrade libgnutls-extra26Upgrade libgnutls28Upgrade libgnutls26-32bitUpgrade libgnutlsxx-develUpgrade libgnutlsxx30Upgrade libgnutls-develUpgrade libgnutls28-32bitUpgrade libgnutls-devel-doc | Dec 12, 2013 | Jun 28, 2013 |
| Ubuntu | — | Upgrade libgnutls13Upgrade libgnutls26 | Nov 8, 2024 | Mar 26, 2012 |
| Vmsa 2012 0013 | — | Upgrade VMware ESX 4.1 to build number 800380Upgrade VMware ESX 4.0 to build number 787047 | Sep 17, 2012 | Mar 26, 2012 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub