Lucene search
HistoryOct 03, 2022 - 4:14 p.m.
CVE-2013-4466
cve-2013-4466
buffer overflow
dane library
gnutls
memory corruption
denial of service
5 Medium
CVSS2
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
PARTIAL
AV:N/AC:L/Au:N/C:N/I:N/A:P
6.5 Medium
AI Score
Confidence
Low
0.003 Low
EPSS
Percentile
68.2%
Buffer overflow in the dane_query_tlsa function in the DANE library (libdane) in GnuTLS 3.1.x before 3.1.15 and 3.2.x before 3.2.5 allows remote servers to cause a denial of service (memory corruption) via a response with more than four DANE entries.
Affected configurations
Node
gnugnutlsMatch3.1.0
ORgnugnutlsMatch3.1.1
ORgnugnutlsMatch3.1.2
ORgnugnutlsMatch3.1.3
ORgnugnutlsMatch3.1.4
ORgnugnutlsMatch3.1.5
ORgnugnutlsMatch3.1.6
ORgnugnutlsMatch3.1.7
ORgnugnutlsMatch3.1.8
ORgnugnutlsMatch3.1.9
ORgnugnutlsMatch3.1.10
ORgnugnutlsMatch3.1.11
ORgnugnutlsMatch3.1.12
ORgnugnutlsMatch3.1.13
ORgnugnutlsMatch3.1.14
ORgnugnutlsMatch3.2.0
ORgnugnutlsMatch3.2.1
ORgnugnutlsMatch3.2.2
ORgnugnutlsMatch3.2.3
ORgnugnutlsMatch3.2.4
Related
fedora
fedora
[SECURITY] Fedora 19 Update: gnutls-3.1.15-1.fc19
2013-10-29 03:34:43
[SECURITY] Fedora 19 Update: gnutls-3.1.16-1.fc19
2013-11-18 02:56:39
[SECURITY] Fedora 19 Update: gnutls-3.1.20-3.fc19
2014-02-22 00:53:17
nessus
nessus
Fedora 19 : gnutls-3.1.15-1.fc19 (2013-20052)
2013-10-29 00:00:00
FreeBSD : gnutls -- denial of service (9065b930-3d8b-11e3-bd1a-e840f2096bd0)
2013-10-27 00:00:00
Fedora 20 : gnutls-3.1.16-1.fc20 (2013-20662)
2013-11-11 00:00:00
openvas
openvas
Fedora Update for gnutls FEDORA-2013-20052
2013-10-29 00:00:00
Mageia: Security Advisory (MGASA-2013-0354)
2022-01-28 00:00:00
Fedora Update for gnutls FEDORA-2013-20052
2013-10-29 00:00:00
freebsd
freebsd
gnutls -- denial of service
2013-10-25 00:00:00
mageia
mageia
Updated gnutls package fixes security vulnerability
2013-12-01 01:17:13
ubuntucve
ubuntucve
CVE-2013-4466
2013-11-20 00:00:00
CVE-2013-4487
2013-11-20 00:00:00
checkpoint_advisories
checkpoint_advisories
GnuTLS DANE dane.c Heap Buffer Overflow (CVE-2013-4466)
2013-12-02 00:00:00
nvd
nvd
CVE-2013-4466
2013-11-20 14:12:30
CVE-2013-4487
2013-11-20 14:12:30
debiancve
debiancve
CVE-2013-4466
2022-10-03 16:14:57
CVE-2013-4487
2022-10-03 16:14:58
prion
prion
Buffer overflow
2013-11-20 14:12:00
Memory corruption
2013-11-20 14:12:00
cvelist
cvelist
CVE-2013-4466
2022-10-03 16:14:57
CVE-2013-4487
2022-10-03 16:14:58
cve
cve
CVE-2013-4487
2022-10-03 16:14:58
5 Medium
CVSS2
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
PARTIAL
AV:N/AC:L/Au:N/C:N/I:N/A:P
6.5 Medium
AI Score
Confidence
Low
0.003 Low
EPSS
Percentile
68.2%
Related for CVE-2013-4466