Lucene search
F5F5:K15160HistoryDec 12, 2014 - 12:00 a.m.
K15160 : GnuTLS vulnerability CVE-2014-0092
2014-12-1200:00:00
my.f5.com
9
Security Advisory Description
lib/x509/verify.c in GnuTLS before 3.1.22 and 3.2.x before 3.2.12 does not properly handle unspecified errors when verifying X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers via a crafted certificate. (CVE-2014-0092)
Impact
Attackers may be able to spoof SSL servers using a crafted certificate.
Note: F5 Product Development has determined that BIG-IP, BIG-IQ, and Enterprise Manager versions ship with vulnerable GnuTLS code. However, the vulnerable code is not used as a server or to make outgoing connections, and is not exploitable.
Related
openvas
openvas
RedHat Update for gnutls RHSA-2014:0246-01
2014-03-04 00:00:00
CentOS Update for gnutls CESA-2014:0246 centos6
2014-03-12 00:00:00
Ubuntu: Security Advisory (USN-2127-1)
2014-03-12 00:00:00
centos
centos
gnutls security update
2014-03-04 21:00:04
gnutls security update
2014-03-04 20:51:10
prion
prion
Code injection
2014-03-07 00:10:00
nvd
nvd
CVE-2014-0092
2014-03-07 00:10:53
suse
suse
Security update for gnutls (critical)
2014-03-04 18:04:13
gnutls: fixed SSL certificate validation (critical)
2014-03-05 19:04:13
gnutls: fixed SSL certificate validation problems (critical)
2014-03-05 08:04:11
nessus
nessus
Debian DSA-2869-1 : gnutls26 - incorrect certificate verification
2014-03-04 00:00:00
Fedora 19 : gnutls-3.1.20-4.fc19 (2014-3363)
2014-03-07 00:00:00
RHEL 4 / 5 / 6 : gnutls (RHSA-2014:0288)
2014-11-08 00:00:00
mageia
mageia
Updated gnutls packages fix security vulnerability
2014-03-04 00:07:34
debian
debian
[SECURITY] [DSA 2869-1] gnutls26 security update
2014-03-03 20:14:51
securityvulns
securityvulns
[ MDVSA-2014:048 ] gnutls
2014-03-13 00:00:00
GnuTLS certificate validation bypass
2014-03-13 00:00:00
ESA-2015-002: Unisphere Central Security Update for Multiple Vulnerabilities
2015-02-02 00:00:00
slackware
slackware
[slackware-security] gnutls
2014-03-04 00:43:33
cvelist
cvelist
CVE-2014-0092
2014-03-06 18:00:00
ibm
ibm
redhat
redhat
(RHSA-2014:0288) Important: gnutls security update
2014-03-12 00:00:00
(RHSA-2014:0246) Important: gnutls security update
2014-03-03 00:00:00
(RHSA-2014:0247) Important: gnutls security update
2014-03-03 00:00:00
debiancve
debiancve
CVE-2014-0092
2014-03-07 00:10:53
f5
f5
SOL15160 - GnuTLS vulnerability CVE-2014-0092
2014-04-10 00:00:00
checkpoint_security
checkpoint_security
checkpoint_advisories
checkpoint_advisories
GnuTLS Certificate Verification Policy Bypass (CVE-2014-0092)
2014-05-08 00:00:00
veracode
veracode
Man-in-the-Middle (MitM)
2019-01-15 08:58:04
seebug
seebug
GnuTLS证书验证安全限制绕过漏洞
2014-03-05 00:00:00
amazon
amazon
Important: gnutls
2014-03-06 14:58:00
ubuntu
ubuntu
GnuTLS vulnerability
2014-03-04 00:00:00
cve
cve
CVE-2014-0092
2014-03-07 00:10:53
ics
ics
ubuntucve
ubuntucve
CVE-2014-0092
2014-03-03 00:00:00
fedora
fedora
[SECURITY] Fedora 19 Update: mingw-gnutls-3.1.22-1.fc19
2014-03-15 15:22:59
[SECURITY] Fedora 20 Update: mingw-gnutls-3.1.22-1.fc20
2014-03-15 15:25:21
[SECURITY] Fedora 20 Update: gnutls-3.1.20-4.fc20
2014-03-06 08:17:02
freebsd
freebsd
gnutls -- multiple certificate verification issues
2014-03-03 00:00:00
oraclelinux
oraclelinux
gnutls security update
2014-03-03 00:00:00
gnutls security update
2014-03-03 00:00:00
altlinux
altlinux
Security fix for the ALT Linux 9 package gnutls30 version 2.12.23-alt2
2014-03-05 00:00:00
Security fix for the ALT Linux 10 package gnutls30 version 2.12.23-alt2
2014-03-05 00:00:00
gentoo
gentoo
GnuTLS: Multiple vulnerabilities
2014-06-13 00:00:00