Lucene search

K
archlinuxArch LinuxASA-201508-8
HistoryAug 25, 2015 - 12:00 a.m.

gnutls: denial of service

2015-08-2500:00:00
Arch Linux
lists.archlinux.org
28

EPSS

0.187

Percentile

96.3%

Kurt Roeckx reported that decoding a specific certificate with very long
DistinguishedName (DN) entries leads to double free, which may result to
a denial of service. Since the DN decoding occurs in almost all
applications using certificates it is recommended to upgrade the latest
GnuTLS version fixing the issue.

OSVersionArchitecturePackageVersionFilename
anyanyanygnutls< 3.4.4.1-1UNKNOWN