Lucene search
Arch LinuxASA-201508-8HistoryAug 25, 2015 - 12:00 a.m.
gnutls: denial of service
2015-08-2500:00:00
Arch Linux
lists.archlinux.org
25
5 Medium
CVSS2
Access Vector
NETWORK
Access Complexity
LOW
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
PARTIAL
AV:N/AC:L/Au:N/C:N/I:N/A:P
0.187 Low
EPSS
Percentile
95.7%
Kurt Roeckx reported that decoding a specific certificate with very long
DistinguishedName (DN) entries leads to double free, which may result to
a denial of service. Since the DN decoding occurs in almost all
applications using certificates it is recommended to upgrade the latest
GnuTLS version fixing the issue.
Related
f5
f5
K17335 : GnuTLS vulnerability CVE-2015-6251
2015-09-29 00:00:00
SOL17335 - GnuTLS vulnerability CVE-2015-6251
2015-09-29 00:00:00
fedora
fedora
[SECURITY] Fedora 23 Update: gnutls-3.4.4-1.fc23
2015-09-01 03:49:46
slackware
slackware
[slackware-security] gnutls
2015-08-21 23:30:43
[slackware-security] gnutls
2016-09-10 19:39:21
openvas
openvas
Debian: Security Advisory (DSA-3334-1)
2015-08-11 00:00:00
Slackware: Security Advisory (SSA:2016-254-01)
2022-04-21 00:00:00
Debian Security Advisory DSA 3334-1 (gnutls28 - security update)
2015-08-12 00:00:00
checkpoint_advisories
checkpoint_advisories
GnuTLS DistinguishedName Decoding Double Free (CVE-2015-6251)
2015-10-26 00:00:00
GnuTLS DistinguishedName Decoding Double Free - ver 2 (CVE-2015-6251)
2016-05-31 00:00:00
securityvulns
securityvulns
GnuTLS double free
2015-08-24 00:00:00
nessus
nessus
openSUSE Security Update : gnutls (openSUSE-2015-567)
2015-09-08 00:00:00
Fedora 23 : gnutls-3.4.4-1.fc23 (2015-13287)
2015-09-01 00:00:00
Debian DSA-3334-1 : gnutls28 - security update
2015-08-13 00:00:00
prion
prion
Double free
2015-08-24 14:59:00
cve
cve
CVE-2015-6251
2015-08-24 14:59:00
cvelist
cvelist
CVE-2015-6251
2015-08-24 14:00:00
ubuntucve
ubuntucve
CVE-2015-6251
2015-08-24 00:00:00
debiancve
debiancve
CVE-2015-6251
2015-08-24 14:59:00
freebsd
freebsd
gnutls -- double free in certificate DN decoding
2015-07-20 00:00:00
ubuntu
ubuntu
GnuTLS vulnerabilities
2015-09-01 00:00:00
mageia
mageia
Updated gnutls packages fix security vulnerabilities
2015-08-25 21:17:48
5 Medium
CVSS2
Access Vector
NETWORK
Access Complexity
LOW
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
PARTIAL
AV:N/AC:L/Au:N/C:N/I:N/A:P
0.187 Low
EPSS
Percentile
95.7%
Related for ASA-201508-8