Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
nvd[email protected]NVD:CVE-2014-8155
HistoryAug 14, 2015 - 6:59 p.m.

CVE-2014-8155

2015-08-1418:59:01
CWE-17
[email protected]
web.nvd.nist.gov
9

CVSS2

4.3

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:M/Au:N/C:N/I:P/A:N

EPSS

0.001

Percentile

46.7%

JSON

GnuTLS before 2.9.10 does not verify the activation and expiration dates of CA certificates, which allows man-in-the-middle attackers to spoof servers via a certificate issued by a CA certificate that is (1) not yet valid or (2) no longer valid.

Affected configurations

Nvd
Node
gnugnutlsRange≤2.9.9
VendorProductVersionCPE
gnugnutls*cpe:2.3:a:gnu:gnutls:*:*:*:*:*:*:*:*

Related

nessus 10
cvelist 1
ubuntucve 1
f5 1
prion 1
cve 1
debiancve 1
veracode 3
redhat 1
openvas 6
centos 1
debian 1
amazon 1
ubuntu 1
osv 1
oraclelinux 1
nessus
nessus
F5 Networks BIG-IP : GnuTLS vulnerability (K53330207)
2019-04-09 00:00:00
CentOS 6 : gnutls (CESA-2015:1457)
2015-07-28 00:00:00
Scientific Linux Security Update : gnutls on SL6.x i386/x86_64 (20150722)
2015-08-04 00:00:00
cvelist
cvelist
CVE-2014-8155
2015-08-14 18:00:00
ubuntucve
ubuntucve
CVE-2014-8155
2014-12-31 00:00:00
f5
f5
K53330207 : GnuTLS vulnerability CVE-2014-8155
2019-04-08 00:00:00
prion
prion
Design/Logic Flaw
2015-08-14 18:59:00
cve
cve
CVE-2014-8155
2015-08-14 18:59:01
debiancve
debiancve
CVE-2014-8155
2015-08-14 18:59:01
veracode
veracode
Man-in-the-Middle (MitM)
2019-01-15 09:06:46
Improper Signature Validation
2019-05-02 05:41:06
Improper Signature Validation
2019-05-02 05:41:06
redhat
redhat
(RHSA-2015:1457) Moderate: gnutls security and bug fix update
2015-07-22 00:00:00
openvas
openvas
Oracle: Security Advisory (ELSA-2015-1457)
2015-10-06 00:00:00
RedHat Update for gnutls RHSA-2015:1457-01
2015-07-23 00:00:00
Ubuntu: Security Advisory (USN-2540-1)
2015-03-24 00:00:00
centos
centos
gnutls security update
2015-07-26 14:11:38
debian
debian
[SECURITY] [DLA 180-1] gnutls26 security update
2015-03-25 07:50:25
amazon
amazon
Medium: gnutls
2015-08-04 11:36:00
ubuntu
ubuntu
GnuTLS vulnerabilities
2015-03-23 00:00:00
osv
osv
gnutls26 - security update
2015-03-25 00:00:00
oraclelinux
oraclelinux
gnutls security and bug fix update
2015-07-28 00:00:00

CVSS2

4.3

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:M/Au:N/C:N/I:P/A:N

EPSS

0.001

Percentile

46.7%

JSON
Related for NVD:CVE-2014-8155
nessus10cvelist1ubuntucve1f51prion1cve1debiancve1veracode3redhat1openvas6centos1debian1amazon1ubuntu1osv1oraclelinux1