The gnutls_x509_dn_oid_name function in lib/x509/common.c in GnuTLS 3.0 before 3.1.20 and 3.2.x before 3.2.10 allows remote attackers to cause a denial of service (NULL pointer dereference) via a crafted X.509 certificate, related to a missing LDAP description for an OID when printing the DN.
CVSS Details
- CVSS 3.1 Base Score: 5.3
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alpine Linux | — | Upgrade gnutls | Aug 30, 2017 | Jun 10, 2014 |
| Debian | — | Upgrade gnutls28 | Jul 30, 2024 | Jun 10, 2014 |
| Gentoo Linux | — | Upgrade net-libs/gnutls. | Oct 30, 2017 | Jun 10, 2014 |
| Oracle Solaris | — | Upgrade library/libtasn1 to version 2.8-0.175.1.21.0.4.0 on Solaris 11.1Upgrade library/gnutls to version 2.8.6-0.175.1.21.0.4.0 on Solaris 11.1 | May 29, 2017 | Jun 10, 2014 |
| Oracle_linux | — | Upgrade gnutls-c++Upgrade gnutlsUpgrade gnutls-develUpgrade gnutls-daneUpgrade gnutls-utils | Oct 16, 2024 | Jun 10, 2014 |
| Suse | — | Upgrade libgnutls-openssl27-debuginfoUpgrade libgnutlsxx-develUpgrade libgnutlsxx28Upgrade libgnutls28-debuginfo-32bitUpgrade libgnutls-openssl27Upgrade libgnutls-devel-32bitUpgrade libgnutls-openssl-develUpgrade gnutls-debuginfoUpgrade gnutls-debugsourceUpgrade libgnutls28-32bitUpgrade libgnutlsxx28-debuginfoUpgrade gnutlsUpgrade libgnutls-develUpgrade libgnutls28Upgrade libgnutls28-debuginfo | Dec 18, 2015 | Jun 6, 2014 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub