GN
Product
Gnutls
74
CVEs
0
On KEV
9.8
Max CVSS
0
New 30D
Severity mix
Critical 8High 20Medium 9Low 1
Watch
Add Gnutls to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2009-5138 | – | Mar 7 | GnuTLS before 2.7.6, when the GNUTLS_VERIFY_ALLOW_X509_V1_CA_CRT flag is not enabled, treats version 1 X.509 certificates as intermediate CAs, which allows remote attackers to… Affected: through 2.7.5; 2.7.0; 2.7.1; 2.7.2; 2.7.3; 2.7.4 |
| CVE-2013-4487 | – | Nov 20 | Off-by-one error in the dane_raw_tlsa in the DANE library (libdane) in GnuTLS 3.1.x before 3.1.16 and 3.2.x before 3.2.6 allows remote servers to cause a denial of service (memory… Affected: 3.2.0; 3.2.1; 3.2.2; 3.2.3; 3.2.4; 3.2.5; +16 more |
| CVE-2013-4466 | – | Nov 20 | Buffer overflow in the dane_query_tlsa function in the DANE library (libdane) in GnuTLS 3.1.x before 3.1.15 and 3.2.x before 3.2.5 allows remote servers to cause a denial of… Affected: 3.1.0; 3.1.1; 3.1.2; 3.1.3; 3.1.4; 3.1.5; +14 more |
| CVE-2013-2116 | – | Jul 3 | The _gnutls_ciphertext2compressed function in lib/gnutls_cipher.c in GnuTLS 2.12.23 allows remote attackers to cause a denial of service (buffer over-read and crash) via a crafted… Affected: 2.12.23 |
| CVE-2013-1619 | – | Feb 8 | The TLS implementation in GnuTLS before 2.12.23, 3.0.x before 3.0.28, and 3.1.x before 3.1.7 does not properly consider timing side-channel attacks on a noncompliant MAC check… Affected: 2.0.0; 2.0.1; 2.0.2; 2.0.3; 2.0.4; 2.1.0; +34 more |
| CVE-2012-1573 | – | Mar 26 | gnutls_cipher.c in libgnutls in GnuTLS before 2.12.17 and 3.x before 3.0.15 does not properly handle data encrypted with a block cipher, which allows remote attackers to cause a… Affected: through 2.12.16; 2.0.0; 2.0.1; 2.0.2; 2.0.3; 2.0.4; +34 more |
| CVE-2012-1569 | – | Mar 26 | The asn1_get_length_der function in decoding.c in GNU Libtasn1 before 2.12, as used in GnuTLS before 3.0.16 and other products, does not properly handle certain large length… Affected: through 3.0.15; 1.0.16; 1.0.17; 1.0.18; 1.0.19; 1.0.20; +34 more |
| CVE-2012-1663 | – | Mar 13 | Double free vulnerability in libgnutls in GnuTLS before 3.0.14 allows remote attackers to cause a denial of service (application crash) or possibly have unspecified other impact… Affected: through 3.0.13; 1.0.16; 1.0.17; 1.0.18; 1.0.19; 1.0.20; +34 more |
| CVE-2012-0390 | – | Jan 6 | The DTLS implementation in GnuTLS 3.0.10 and earlier executes certain error-handling code only if there is a specific relationship between a padding length and the ciphertext… Affected: through 3.0.10; 2.2.4; 2.2.5; 2.4.0; 2.4.1; 2.4.2; +34 more |
| CVE-2011-4128 | – | Dec 8 | Buffer overflow in the gnutls_session_get_data function in lib/gnutls_session.c in GnuTLS 2.12.x before 2.12.14 and 3.x before 3.0.7, when used on a client that performs… Affected: 2.12.0; 2.12.1; 2.12.2; 2.12.3; 2.12.4; 2.12.5; +16 more |
| CVE-2006-7239 | – | May 24 | The _gnutls_x509_oid2mac_algorithm function in lib/gnutls_algorithms.c in GnuTLS before 1.4.2 allows remote attackers to cause a denial of service (crash) via a crafted X.509… Affected: through 1.4.1; 1.0.16; 1.0.17; 1.0.18; 1.0.19; 1.0.20; +34 more |
| CVE-2010-0731 | – | Mar 26 | The gnutls_x509_crt_get_serial function in the GnuTLS library before 1.2.1, when running on big-endian, 64-bit platforms, calls the asn1_read_value with a pointer to the wrong… Affected: through 1.2.0; 1.0.16; 1.0.17; 1.0.18; 1.0.19; 1.0.20; +16 more |
| CVE-2009-2730 | – | Aug 12 | libgnutls in GnuTLS before 2.8.2 does not properly handle a '\0' character in a domain name in the subject's (1) Common Name (CN) or (2) Subject Alternative Name (SAN) field of an… Affected: through 2.8.1; 1.0.16; 1.0.17; 1.0.18; 1.0.19; 1.0.20; +34 more |
| CVE-2009-2409 | – | Jul 30 | The Network Security Services (NSS) library before 3.12.3, as used in Firefox; GnuTLS before 2.6.4 and 2.7.4; OpenSSL 0.9.8 through 0.9.8k; and other products support MD2 with… Affected: before 2.6.4; 2.7.0 before 2.7.4 |
| CVE-2009-1417 | – | Apr 30 | gnutls-cli in GnuTLS before 2.6.6 does not verify the activation and expiration times of X.509 certificates, which allows remote attackers to successfully present a certificate… Affected: through 2.6.5; 1.0.16; 1.0.17; 1.0.18; 1.0.19; 1.0.20; +34 more |
| CVE-2009-1416 | – | Apr 30 | lib/gnutls_pk.c in libgnutls in GnuTLS 2.5.0 through 2.6.5 generates RSA keys stored in DSA structures, instead of the intended DSA keys, which might allow remote attackers to… Affected: 2.5.0; 2.6.0; 2.6.1; 2.6.2; 2.6.3; 2.6.4; +1 more |
| CVE-2009-1415 | – | Apr 30 | lib/pk-libgcrypt.c in libgnutls in GnuTLS before 2.6.6 does not properly handle invalid DSA signatures, which allows remote attackers to cause a denial of service (application… Affected: before 2.6.6 |
| CVE-2008-2377 | – | Aug 8 | Use-after-free vulnerability in the _gnutls_handshake_hash_buffers_clear function in lib/gnutls_handshake.c in libgnutls in GnuTLS 2.3.5 through 2.4.0 allows remote attackers to… Affected: 2.3.5; 2.3.6; 2.3.7; 2.3.8; 2.3.9; 2.4.0 |
| CVE-2008-1949 | – | May 21 | The _gnutls_recv_client_kx_message function in lib/gnutls_kx.c in libgnutls in gnutls-serv in GnuTLS before 2.2.4 continues to process Client Hello messages within a TLS message… Affected: 1.0.18; 1.0.19; 1.0.20; 1.0.21; 1.0.22; 1.0.23; +34 more |
| CVE-2008-1950 | – | May 21 | Integer signedness error in the _gnutls_ciphertext2compressed function in lib/gnutls_cipher.c in libgnutls in GnuTLS before 2.2.4 allows remote attackers to cause a denial of… Affected: 1.0.18; 1.0.19; 1.0.20; 1.0.21; 1.0.22; 1.0.23; +34 more |
| CVE-2008-1948 | – | May 21 | The _gnutls_server_name_recv_params function in lib/ext_server_name.c in libgnutls in gnutls-serv in GnuTLS before 2.2.4 does not properly calculate the number of Server Names in… Affected: 1.0.18; 1.0.19; 1.0.20; 1.0.21; 1.0.22; 1.0.23; +34 more |
| CVE-2006-4790 | – | Sep 14 | verify.c in GnuTLS before 1.4.4, when using an RSA key with exponent 3, does not properly handle excess data in the digestAlgorithm.parameters field when generating a hash, which… Affected: 1.0.17; 1.0.18; 1.0.19; 1.0.20; 1.0.21; 1.0.22; +34 more |
| CVE-2005-1431 | – | May 3 | The "record packet parsing" in GnuTLS 1.2 before 1.2.3 and 1.0 before 1.0.25 allows remote attackers to cause a denial of service, possibly related to padding bytes in… Affected: 1.0.18; 1.0.19; 1.0.20; 1.0.21; 1.0.22; 1.0.23; +4 more |
| CVE-2004-2531 | – | Dec 31 | X.509 Certificate Signature Verification in Gnu transport layer security library (GnuTLS) 1.0.16 allows remote attackers to cause a denial of service (CPU consumption) via… Affected: 1.0.16 |