Lucene search

K
gentooGentoo FoundationGLSA-201506-03
HistoryJun 22, 2015 - 12:00 a.m.

GnuTLS: Multiple vulnerabilities

2015-06-2200:00:00
Gentoo Foundation
security.gentoo.org
20

CVSS2

7.5

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

EPSS

0.033

Percentile

91.3%

Background

GnuTLS is an Open Source implementation of the TLS and SSL protocols.

Description

Multiple vulnerabilities have been discovered in GnuTLS. Please review the CVE identifiers and external references below for details.

Impact

A context-dependent attacker can cause a denial of service condition.

Workaround

There is no known workaround at this time.

Resolution

All GnuTLS users should upgrade to the latest version:

 # emerge --sync
 # emerge --ask --oneshot --verbose ">=net-libs/gnutls-3.3.15"
OSVersionArchitecturePackageVersionFilename
Gentooanyallnet-libs/gnutls< 3.3.15UNKNOWN

CVSS2

7.5

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

EPSS

0.033

Percentile

91.3%