Lucene search
HistoryMar 07, 2014 - 12:10 a.m.
CVE-2014-1959
cve-2014-1959
gnutls
x.509 certificates
security vulnerability
nvd
remote attackers
bypass restrictions
5.8 Medium
CVSS2
Attack Vector
NETWORK
Attack Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
NONE
AV:N/AC:M/Au:N/C:P/I:P/A:N
6.3 Medium
AI Score
Confidence
Low
0.007 Low
EPSS
Percentile
79.6%
lib/x509/verify.c in GnuTLS before 3.1.21 and 3.2.x before 3.2.11 treats version 1 X.509 certificates as intermediate CAs, which allows remote attackers to bypass intended restrictions by leveraging a X.509 V1 certificate from a trusted CA to issue new certificates.
Affected configurations
Node
gnugnutlsRange≤3.1.20
ORgnugnutlsMatch3.1.0
ORgnugnutlsMatch3.1.1
ORgnugnutlsMatch3.1.2
ORgnugnutlsMatch3.1.3
ORgnugnutlsMatch3.1.4
ORgnugnutlsMatch3.1.5
ORgnugnutlsMatch3.1.6
ORgnugnutlsMatch3.1.7
ORgnugnutlsMatch3.1.8
ORgnugnutlsMatch3.1.9
ORgnugnutlsMatch3.1.10
ORgnugnutlsMatch3.1.11
ORgnugnutlsMatch3.1.12
ORgnugnutlsMatch3.1.13
ORgnugnutlsMatch3.1.14
ORgnugnutlsMatch3.1.15
ORgnugnutlsMatch3.1.16
ORgnugnutlsMatch3.1.17
ORgnugnutlsMatch3.1.18
ORgnugnutlsMatch3.1.19
Node
gnugnutlsRange≤3.2.10
ORgnugnutlsMatch3.2.0
ORgnugnutlsMatch3.2.1
ORgnugnutlsMatch3.2.2
ORgnugnutlsMatch3.2.3
ORgnugnutlsMatch3.2.4
ORgnugnutlsMatch3.2.5
ORgnugnutlsMatch3.2.6
ORgnugnutlsMatch3.2.7
ORgnugnutlsMatch3.2.8
ORgnugnutlsMatch3.2.8.1
ORgnugnutlsMatch3.2.9
Related
openvas
openvas
Fedora Update for gnutls FEDORA-2014-2580
2014-02-20 00:00:00
Fedora Update for gnutls FEDORA-2014-2580
2014-02-20 00:00:00
Fedora Update for mingw-gnutls FEDORA-2014-2583
2014-02-25 00:00:00
mageia
mageia
Updated gnutls packages fix security vulnerability
2014-02-16 17:32:37
securityvulns
securityvulns
[USN-2121-1] GnuTLS vulnerability
2014-02-28 00:00:00
GnuTLS certificates validation vulnerability
2014-02-28 00:00:00
fedora
fedora
[SECURITY] Fedora 20 Update: gnutls-3.1.20-3.fc20
2014-02-17 21:09:19
[SECURITY] Fedora 20 Update: mingw-gnutls-3.1.21-1.fc20
2014-02-24 12:28:51
[SECURITY] Fedora 19 Update: mingw-gnutls-3.1.21-1.fc19
2014-02-24 12:35:59
ubuntucve
ubuntucve
CVE-2014-1959
2014-02-21 00:00:00
CVE-2009-5138
2014-03-07 00:00:00
nessus
nessus
Fedora 20 : gnutls-3.1.20-3.fc20 (2014-2580)
2014-02-18 00:00:00
Mandriva Linux Security Advisory : gnutls (MDVSA-2014:043)
2014-02-20 00:00:00
Slackware 14.0 / 14.1 / current : gnutls (SSA:2014-050-01)
2014-02-20 00:00:00
checkpoint_advisories
checkpoint_advisories
prion
prion
Design/Logic Flaw
2014-03-07 00:10:00
Code injection
2014-03-07 00:10:00
nvd
nvd
CVE-2014-1959
2014-03-07 00:10:57
CVE-2009-5138
2014-03-07 00:10:53
slackware
slackware
gnutls
2014-02-19 20:24:06
debian
debian
[SECURITY] [DSA 2866-1] gnutls26 security update
2014-02-22 12:39:10
[SECURITY] [DSA 2866-1] gnutls26 security update
2014-02-22 12:39:10
[BSA-093] Security Update for gnutls28
2014-02-22 14:11:49
debiancve
debiancve
CVE-2014-1959
2014-03-07 00:10:57
CVE-2009-5138
2014-03-07 00:10:53
ubuntu
ubuntu
GnuTLS vulnerability
2014-02-25 00:00:00
cvelist
cvelist
CVE-2014-1959
2014-03-06 18:00:00
CVE-2009-5138
2014-03-06 18:00:00
freebsd
freebsd
gnutls -- multiple certificate verification issues
2014-03-03 00:00:00
cve
cve
CVE-2009-5138
2014-03-07 00:10:53
veracode
veracode
Authorization Bypass
2019-01-15 08:58:06
f5
f5
K15623 : GnuTLS vulnerability CVE-2009-5138
2014-10-17 00:00:00
altlinux
altlinux
Security fix for the ALT Linux 10 package gnutls30 version 2.12.23-alt2
2014-03-05 00:00:00
Security fix for the ALT Linux 9 package gnutls30 version 2.12.23-alt2
2014-03-05 00:00:00
gentoo
gentoo
GnuTLS: Multiple vulnerabilities
2014-06-13 00:00:00
5.8 Medium
CVSS2
Attack Vector
NETWORK
Attack Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
NONE
AV:N/AC:M/Au:N/C:P/I:P/A:N
6.3 Medium
AI Score
Confidence
Low
0.007 Low
EPSS
Percentile
79.6%
Related for CVE-2014-1959