Lucene search
HistoryNov 20, 2013 - 2:12 p.m.
CVE-2013-4466
5 Medium
CVSS2
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
PARTIAL
AV:N/AC:L/Au:N/C:N/I:N/A:P
6.5 Medium
AI Score
Confidence
High
0.003 Low
EPSS
Percentile
68.2%
Buffer overflow in the dane_query_tlsa function in the DANE library (libdane) in GnuTLS 3.1.x before 3.1.15 and 3.2.x before 3.2.5 allows remote servers to cause a denial of service (memory corruption) via a response with more than four DANE entries.
Affected configurations
Node
gnugnutlsMatch3.1.0
ORgnugnutlsMatch3.1.1
ORgnugnutlsMatch3.1.2
ORgnugnutlsMatch3.1.3
ORgnugnutlsMatch3.1.4
ORgnugnutlsMatch3.1.5
ORgnugnutlsMatch3.1.6
ORgnugnutlsMatch3.1.7
ORgnugnutlsMatch3.1.8
ORgnugnutlsMatch3.1.9
ORgnugnutlsMatch3.1.10
ORgnugnutlsMatch3.1.11
ORgnugnutlsMatch3.1.12
ORgnugnutlsMatch3.1.13
ORgnugnutlsMatch3.1.14
ORgnugnutlsMatch3.2.0
ORgnugnutlsMatch3.2.1
ORgnugnutlsMatch3.2.2
ORgnugnutlsMatch3.2.3
ORgnugnutlsMatch3.2.4
Related
nessus
nessus
FreeBSD : gnutls -- denial of service (9065b930-3d8b-11e3-bd1a-e840f2096bd0)
2013-10-27 00:00:00
Fedora 19 : gnutls-3.1.15-1.fc19 (2013-20052)
2013-10-29 00:00:00
Fedora 20 : gnutls-3.1.16-1.fc20 (2013-20662)
2013-11-11 00:00:00
openvas
openvas
Mageia: Security Advisory (MGASA-2013-0354)
2022-01-28 00:00:00
Fedora Update for gnutls FEDORA-2013-20052
2013-10-29 00:00:00
Fedora Update for gnutls FEDORA-2013-20052
2013-10-29 00:00:00
fedora
fedora
[SECURITY] Fedora 19 Update: gnutls-3.1.15-1.fc19
2013-10-29 03:34:43
[SECURITY] Fedora 19 Update: gnutls-3.1.16-1.fc19
2013-11-18 02:56:39
[SECURITY] Fedora 19 Update: gnutls-3.1.20-3.fc19
2014-02-22 00:53:17
freebsd
freebsd
gnutls -- denial of service
2013-10-25 00:00:00
mageia
mageia
Updated gnutls package fixes security vulnerability
2013-12-01 01:17:13
ubuntucve
ubuntucve
CVE-2013-4466
2013-11-20 00:00:00
CVE-2013-4487
2013-11-20 00:00:00
cve
cve
CVE-2013-4466
2022-10-03 16:14:57
CVE-2013-4487
2022-10-03 16:14:58
checkpoint_advisories
checkpoint_advisories
GnuTLS DANE dane.c Heap Buffer Overflow (CVE-2013-4466)
2013-12-02 00:00:00
debiancve
debiancve
CVE-2013-4466
2022-10-03 16:14:57
CVE-2013-4487
2022-10-03 16:14:58
prion
prion
Buffer overflow
2013-11-20 14:12:00
Memory corruption
2013-11-20 14:12:00
cvelist
cvelist
CVE-2013-4466
2022-10-03 16:14:57
CVE-2013-4487
2022-10-03 16:14:58
nvd
nvd
CVE-2013-4487
2013-11-20 14:12:30
5 Medium
CVSS2
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
PARTIAL
AV:N/AC:L/Au:N/C:N/I:N/A:P
6.5 Medium
AI Score
Confidence
High
0.003 Low
EPSS
Percentile
68.2%
Related for NVD:CVE-2013-4466