gnutls_cipher.c in libgnutls in GnuTLS before 2.12.17 and 3.x before 3.0.15 does not properly handle data encrypted with a block cipher, which allows remote attackers to cause a denial of service (heap memory corruption and application crash) via a crafted record, as demonstrated by a crafted GenericBlockCipher structure.
CVSS Details
- CVSS 3.1 Base Score: 5.3
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alpine Linux | — | Upgrade gnutls | Aug 30, 2017 | Mar 26, 2012 |
| Centos_linux | — | Upgrade gnutls-guileUpgrade gnutls-utilsUpgrade gnutls-develUpgrade gnutls | Dec 1, 2016 | Mar 26, 2012 |
| Debian | — | Upgrade gnutls28 | Jul 30, 2024 | Mar 26, 2012 |
| Freebsd | — | Upgrade gnutlsUpgrade gnutls-devel | Dec 10, 2025 | Mar 21, 2012 |
| Gentoo Linux | — | Upgrade net-libs/gnutls. | Oct 30, 2017 | Mar 26, 2012 |
| Oracle Solaris | — | Upgrade consolidation/desktop/desktop-incorporation to version 0.5.11-0.175.2.0.0.42.0 on Solaris 11.2Upgrade library/gnutls to version 2.8.6-0.175.1.8.0.2.0 on Solaris 11.1 | May 29, 2017 | Mar 26, 2012 |
| Oracle_linux | — | Upgrade gnutls-develUpgrade gnutlsUpgrade gnutls-utilsUpgrade gnutls-guile | Oct 16, 2024 | Mar 26, 2012 |
| Redhat_linux | — | No solution exists | Jul 9, 2025 | Mar 21, 2012 |
| Suse | — | Upgrade gnutls-x86Upgrade libgnutls28-32bitUpgrade libgnutls-openssl27-debuginfoUpgrade libgnutls28Upgrade libgnutls-devel-32bitUpgrade libgnutlsxx-develUpgrade libgnutls-extra28Upgrade gnutls-develUpgrade gnutls-64bitUpgrade libgnutls-develUpgrade libgnutlsxx28Upgrade libgnutls28-debuginfo-32bitUpgrade gnutls-debugsourceUpgrade gnutls-devel-32bitUpgrade libgnutls28-debuginfoUpgrade gnutls-debuginfoUpgrade gnutlsUpgrade libgnutls28-debuginfo-x86Upgrade libgnutls-openssl-develUpgrade gnutls-devel-64bitUpgrade libgnutlsxx28-debuginfoUpgrade gnutls-32bitUpgrade libgnutls28-x86Upgrade libgnutls-extra28-debuginfoUpgrade libgnutls-extra-develUpgrade libgnutls-openssl27 | Dec 12, 2013 | Mar 26, 2012 |
| Ubuntu | — | Upgrade libgnutls26Upgrade libgnutls13 | Nov 8, 2024 | Mar 26, 2012 |
| Vmsa 2012 0013 | — | Upgrade VMware ESX 4.0 to build number 787047Upgrade VMware ESX 4.1 to build number 800380 | Sep 17, 2012 | Mar 26, 2012 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub