gnutls_cipher.c in libgnutls in GnuTLS before 2.12.17 and 3.x before 3.0.15 does not properly handle data encrypted with a block cipher, which allows remote attackers to cause a denial of service (heap memory corruption and application crash) via a crafted record, as demonstrated by a crafted GenericBlockCipher structure.
CVSS Details
- CVSS 3.1 Base Score: 5.3
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alpine Linux | — | Upgrade gnutls | Aug 30, 2017 | Mar 26, 2012 |
| Centos_linux | — | Upgrade gnutls-develUpgrade gnutlsUpgrade gnutls-guileUpgrade gnutls-utils | Dec 1, 2016 | Mar 26, 2012 |
| Debian | — | Upgrade gnutls28 | Jul 30, 2024 | Mar 26, 2012 |
| Freebsd | — | Upgrade gnutlsUpgrade gnutls-devel | Dec 10, 2025 | Mar 21, 2012 |
| Gentoo Linux | — | Upgrade net-libs/gnutls. | Oct 30, 2017 | Mar 26, 2012 |
| Oracle Solaris | — | Upgrade consolidation/desktop/desktop-incorporation to version 0.5.11-0.175.2.0.0.42.0 on Solaris 11.2Upgrade library/gnutls to version 2.8.6-0.175.1.8.0.2.0 on Solaris 11.1 | May 29, 2017 | Mar 26, 2012 |
| Oracle_linux | — | Upgrade gnutls-guileUpgrade gnutls-utilsUpgrade gnutls-develUpgrade gnutls | Oct 16, 2024 | Mar 26, 2012 |
| Redhat_linux | — | No solution exists | Jul 9, 2025 | Mar 21, 2012 |
| Suse | — | Upgrade libgnutls-extra26Upgrade gnutlsUpgrade libgnutls30Upgrade libgnutls-openssl-develUpgrade libgnutls-extra-develUpgrade libgnutlsxx28Upgrade libgnutls30-32bitUpgrade libgnutls26-x86Upgrade libgnutls-dane0Upgrade libgnutls-openssl27Upgrade libgnutls26Upgrade libgnutls26-32bitUpgrade libgnutls-devel-docUpgrade libgnutlsxx30Upgrade libgnutls-develUpgrade libgnutls28-32bitUpgrade libgnutlsxx-develUpgrade libgnutls28 | Dec 12, 2013 | Jun 28, 2013 |
| Ubuntu | — | Upgrade libgnutls13Upgrade libgnutls26 | Nov 8, 2024 | Mar 26, 2012 |
| Vmsa 2012 0013 | — | Upgrade VMware ESX 4.1 to build number 800380Upgrade VMware ESX 4.0 to build number 787047 | Sep 17, 2012 | Mar 26, 2012 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub