Lucene search

K

PRIOn knowledge basePRION:CVE-2014-3465

HistoryJun 10, 2014 - 2:55 p.m.

Null pointer dereference

2014-06-1014:55:00

PRIOn knowledge base

www.prio-n.com

10

6.8 Medium

AI Score

Confidence

High

0.04 Low

EPSS

Percentile

92.1%

The gnutls_x509_dn_oid_name function in lib/x509/common.c in GnuTLS 3.0 before 3.1.20 and 3.2.x before 3.2.10 allows remote attackers to cause a denial of service (NULL pointer dereference) via a crafted X.509 certificate, related to a missing LDAP description for an OID when printing the DN.

CPENameOperatorVersion
gnutlseq3.0.12
gnutlseq3.0.23
gnutlseq3.0.27
gnutlseq3.1.0
gnutlseq3.1.11
gnutlseq3.1.13
gnutlseq3.1.19
gnutlseq3.0.3
gnutlseq3.2.3
gnutlseq3.0.9

Rows per page:

1-10 of 601

References

lists.gnutls.org/pipermail/gnutls-help/2014-January/003326.html

lists.gnutls.org/pipermail/gnutls-help/2014-January/003327.html

lists.opensuse.org/opensuse-security-announce/2014-06/msg00007.html

lists.opensuse.org/opensuse-security-announce/2014-06/msg00010.html

rhn.redhat.com/errata/RHSA-2014-0684.html

secunia.com/advisories/59086

bugzilla.redhat.com/show_bug.cgi?id=1101734

www.gitorious.org/gnutls/gnutls/commit/d3648ebb04b650e6d20a2ec1fb839256b30b9fc6

6.8 Medium

AI Score

Confidence

High

0.04 Low

EPSS

Percentile

92.1%

Related for PRION:CVE-2014-3465

nvd1 ubuntucve1 debiancve1 cve1 cvelist1 openvas7 redhat1 suse2 oraclelinux1 nessus8 mageia1 gentoo1 slackware1 securityvulns2