A vulnerability was found in GnuTLS, where a cockpit (which uses gnuTLS) rejects a certificate chain with distributed trust. This issue occurs when validating a certificate chain with cockpit-certificate-ensure. This flaw allows an unauthenticated, remote client or attacker to initiate a denial of service attack.
CVSS Details
- CVSS 3.1 Base Score: 7.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | alma-upgrade-gnutlsalma-upgrade-gnutls-c++alma-upgrade-gnutls-danealma-upgrade-gnutls-develalma-upgrade-gnutls-utils | Jan 31, 2024 | Jan 16, 2024 | |
| Alpine Linux | alpine-linux-upgrade-gnutls | Mar 26, 2024 | Jan 16, 2024 | |
| Amazon_linux_2023 | amazon-linux-2023-upgrade-gnutlsamazon-linux-2023-upgrade-gnutls-camazon-linux-2023-upgrade-gnutls-c-debuginfoamazon-linux-2023-upgrade-gnutls-daneamazon-linux-2023-upgrade-gnutls-dane-debuginfoamazon-linux-2023-upgrade-gnutls-debuginfoamazon-linux-2023-upgrade-gnutls-debugsourceamazon-linux-2023-upgrade-gnutls-develamazon-linux-2023-upgrade-gnutls-utilsamazon-linux-2023-upgrade-gnutls-utils-debuginfo | Feb 17, 2025 | Jan 16, 2024 | |
| Debian | debian-upgrade-gnutls28 | Jul 30, 2024 | Jan 16, 2024 | |
| Gentoo Linux | gentoo-linux-upgrade-net-libs-gnutls | Jul 2, 2025 | Jan 16, 2024 | |
| Huawei Euleros 2_0_sp11 | huawei-euleros-2_0_sp11-upgrade-gnutlshuawei-euleros-2_0_sp11-upgrade-gnutls-utils | Mar 13, 2024 | Jan 16, 2024 | |
| Huawei Euleros 2_0_sp12 | huawei-euleros-2_0_sp12-upgrade-gnutlshuawei-euleros-2_0_sp12-upgrade-gnutls-utils | May 31, 2024 | Jan 16, 2024 | |
| Oracle_linux | — | oracle-linux-upgrade-gnutlsoracle-linux-upgrade-gnutls-coracle-linux-upgrade-gnutls-daneoracle-linux-upgrade-gnutls-develoracle-linux-upgrade-gnutls-utils | Feb 5, 2024 | Jan 16, 2024 |
| Redhat_linux | redhat-upgrade-gnutlsredhat-upgrade-gnutls-credhat-upgrade-gnutls-c-debuginforedhat-upgrade-gnutls-daneredhat-upgrade-gnutls-dane-debuginforedhat-upgrade-gnutls-debuginforedhat-upgrade-gnutls-debugsourceredhat-upgrade-gnutls-develredhat-upgrade-gnutls-utilsredhat-upgrade-gnutls-utils-debuginfo | Jan 30, 2024 | Jan 16, 2024 | |
| Suse | — | suse-upgrade-gnutlssuse-upgrade-gnutls-guilesuse-upgrade-libgnutls-develsuse-upgrade-libgnutls-devel-32bitsuse-upgrade-libgnutls30suse-upgrade-libgnutls30-32bitsuse-upgrade-libgnutls30-hmacsuse-upgrade-libgnutls30-hmac-32bitsuse-upgrade-libgnutlsxx-develsuse-upgrade-libgnutlsxx28suse-upgrade-libgnutlsxx30 | Feb 28, 2024 | Jan 16, 2024 |
| Ubuntu | ubuntu-upgrade-libgnutls30 | Jan 23, 2024 | Jan 16, 2024 | |
| Vmware Photon_os | vmware-photon_os_update_tdnf | Jan 20, 2025 | Jan 16, 2024 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub