Lucene search
Debian Security Bug TrackerDEBIANCVE:CVE-2014-1959HistoryMar 07, 2014 - 12:10 a.m.
CVE-2014-1959
2014-03-0700:10:57
Debian Security Bug Tracker
security-tracker.debian.org
16
5.8 Medium
CVSS2
Attack Vector
NETWORK
Attack Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
NONE
AV:N/AC:M/Au:N/C:P/I:P/A:N
0.007 Low
EPSS
Percentile
79.6%
lib/x509/verify.c in GnuTLS before 3.1.21 and 3.2.x before 3.2.11 treats version 1 X.509 certificates as intermediate CAs, which allows remote attackers to bypass intended restrictions by leveraging a X.509 V1 certificate from a trusted CA to issue new certificates.
| OS | Version | Architecture | Package | Version | Filename |
|---|---|---|---|---|---|
| Debian | 12 | all | gnutls28 | < 3.2.11-1 | gnutls28_3.2.11-1_all.deb |
| Debian | 11 | all | gnutls28 | < 3.2.11-1 | gnutls28_3.2.11-1_all.deb |
| Debian | 999 | all | gnutls28 | < 3.2.11-1 | gnutls28_3.2.11-1_all.deb |
| Debian | 13 | all | gnutls28 | < 3.2.11-1 | gnutls28_3.2.11-1_all.deb |
Related
openvas
openvas
Fedora Update for gnutls FEDORA-2014-2580
2014-02-20 00:00:00
Fedora Update for gnutls FEDORA-2014-2580
2014-02-20 00:00:00
Fedora Update for mingw-gnutls FEDORA-2014-2583
2014-02-25 00:00:00
mageia
mageia
Updated gnutls packages fix security vulnerability
2014-02-16 17:32:37
securityvulns
securityvulns
[USN-2121-1] GnuTLS vulnerability
2014-02-28 00:00:00
GnuTLS certificates validation vulnerability
2014-02-28 00:00:00
fedora
fedora
[SECURITY] Fedora 20 Update: gnutls-3.1.20-3.fc20
2014-02-17 21:09:19
[SECURITY] Fedora 20 Update: mingw-gnutls-3.1.21-1.fc20
2014-02-24 12:28:51
[SECURITY] Fedora 19 Update: mingw-gnutls-3.1.21-1.fc19
2014-02-24 12:35:59
ubuntucve
ubuntucve
CVE-2014-1959
2014-02-21 00:00:00
CVE-2009-5138
2014-03-07 00:00:00
nessus
nessus
Fedora 20 : gnutls-3.1.20-3.fc20 (2014-2580)
2014-02-18 00:00:00
Mandriva Linux Security Advisory : gnutls (MDVSA-2014:043)
2014-02-20 00:00:00
Slackware 14.0 / 14.1 / current : gnutls (SSA:2014-050-01)
2014-02-20 00:00:00
checkpoint_advisories
checkpoint_advisories
prion
prion
Design/Logic Flaw
2014-03-07 00:10:00
Code injection
2014-03-07 00:10:00
nvd
nvd
CVE-2014-1959
2014-03-07 00:10:57
CVE-2009-5138
2014-03-07 00:10:53
slackware
slackware
gnutls
2014-02-19 20:24:06
debian
debian
[SECURITY] [DSA 2866-1] gnutls26 security update
2014-02-22 12:39:10
[SECURITY] [DSA 2866-1] gnutls26 security update
2014-02-22 12:39:10
[BSA-093] Security Update for gnutls28
2014-02-22 14:11:49
cve
cve
CVE-2014-1959
2014-03-07 00:10:57
CVE-2009-5138
2014-03-07 00:10:53
ubuntu
ubuntu
GnuTLS vulnerability
2014-02-25 00:00:00
cvelist
cvelist
CVE-2014-1959
2014-03-06 18:00:00
CVE-2009-5138
2014-03-06 18:00:00
freebsd
freebsd
gnutls -- multiple certificate verification issues
2014-03-03 00:00:00
veracode
veracode
Authorization Bypass
2019-01-15 08:58:06
debiancve
debiancve
CVE-2009-5138
2014-03-07 00:10:53
f5
f5
K15623 : GnuTLS vulnerability CVE-2009-5138
2014-10-17 00:00:00
altlinux
altlinux
Security fix for the ALT Linux 10 package gnutls30 version 2.12.23-alt2
2014-03-05 00:00:00
Security fix for the ALT Linux 9 package gnutls30 version 2.12.23-alt2
2014-03-05 00:00:00
gentoo
gentoo
GnuTLS: Multiple vulnerabilities
2014-06-13 00:00:00
5.8 Medium
CVSS2
Attack Vector
NETWORK
Attack Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
NONE
AV:N/AC:M/Au:N/C:P/I:P/A:N
0.007 Low
EPSS
Percentile
79.6%
Related for DEBIANCVE:CVE-2014-1959