Lucene search

K
freebsdFreeBSD9065B930-3D8B-11E3-BD1A-E840F2096BD0
HistoryOct 25, 2013 - 12:00 a.m.

gnutls -- denial of service

2013-10-2500:00:00
vuxml.freebsd.org
14

5 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:N/I:N/A:P

0.003 Low

EPSS

Percentile

68.2%

Salvatore Bonaccorso reports:

This vulnerability affects the DANE library of gnutls 3.1.x and
gnutls 3.2.x. A server that returns more 4 DANE entries could
corrupt the memory of a requesting client.

OSVersionArchitecturePackageVersionFilename
FreeBSDanynoarchgnutls3< 3.1.16UNKNOWN

5 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:N/I:N/A:P

0.003 Low

EPSS

Percentile

68.2%