A vulnerability was found in GnuTLS, where a cockpit (which uses gnuTLS) rejects a certificate chain with distributed trust. This issue occurs when validating a certificate chain with cockpit-certificate-ensure. This flaw allows an unauthenticated, remote client or attacker to initiate a denial of service attack.
CVSS Details
- CVSS 3.1 Base Score: 7.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade gnutls-daneUpgrade gnutls-utilsUpgrade gnutls-c++Upgrade gnutlsUpgrade gnutls-devel | Jan 31, 2024 | Jan 16, 2024 |
| Alpine Linux | — | Upgrade gnutls | Mar 26, 2024 | Jan 16, 2024 |
| Amazon_linux_2023 | — | Upgrade gnutls-dane-debuginfoUpgrade gnutls-debugsourceUpgrade gnutls-c++-debuginfoUpgrade gnutls-utils-debuginfoUpgrade gnutlsUpgrade gnutls-develUpgrade gnutls-debuginfoUpgrade gnutls-c++Upgrade gnutls-utilsUpgrade gnutls-dane | Feb 17, 2025 | Jan 16, 2024 |
| Debian | — | Upgrade gnutls28 | Jul 30, 2024 | Jan 16, 2024 |
| Gentoo Linux | — | Upgrade net-libs/gnutls. | Jul 2, 2025 | Jan 16, 2024 |
| Huawei Euleros 2_0_sp11 | — | Upgrade gnutls-utilsUpgrade gnutls | Mar 13, 2024 | Jan 16, 2024 |
| Huawei Euleros 2_0_sp12 | — | Upgrade gnutlsUpgrade gnutls-utils | May 31, 2024 | Jan 16, 2024 |
| Oracle_linux | — | Upgrade gnutls-c++Upgrade gnutlsUpgrade gnutls-daneUpgrade gnutls-utilsUpgrade gnutls-devel | Feb 5, 2024 | Jan 16, 2024 |
| Redhat_linux | — | Upgrade gnutls-utils-debuginfoUpgrade gnutls-dane-debuginfoUpgrade gnutls-debuginfoUpgrade gnutls-debugsourceUpgrade gnutls-c++Upgrade gnutls-develUpgrade gnutls-utilsUpgrade gnutlsUpgrade gnutls-daneNo solution existsUpgrade gnutls-c++-debuginfo | Jan 30, 2024 | Jan 16, 2024 |
| Suse | — | Upgrade libgnutlsxx-develUpgrade libgnutls30-32bitUpgrade libgnutlsxx28Upgrade libgnutls-devel-32bitUpgrade libgnutls30Upgrade libgnutls30-hmac-32bitUpgrade libgnutls30-hmacUpgrade libgnutls-develUpgrade gnutls-guileUpgrade libgnutlsxx30Upgrade gnutls | Feb 28, 2024 | Jan 16, 2024 |
| Ubuntu | — | Upgrade libgnutls30 | Jan 23, 2024 | Jan 16, 2024 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Jan 16, 2024 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub