CVE-2005-1431

2005-05-0304:00:00

mitre

web.nvd.nist.gov

cve-2005-1431

gnutls

vulnerability

remote attackers

denial of service

gnutils_cipher

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:N/I:N/A:P

AI Score

6.4

Confidence

Low

EPSS

0.027

Percentile

90.5%

JSON

The “record packet parsing” in GnuTLS 1.2 before 1.2.3 and 1.0 before 1.0.25 allows remote attackers to cause a denial of service, possibly related to padding bytes in gnutils_cipher.c.

Affected configurations

Nvd

Node

gnugnutlsMatch1.0.18

gnugnutlsMatch1.0.19

gnugnutlsMatch1.0.20

gnugnutlsMatch1.0.21

gnugnutlsMatch1.0.22

gnugnutlsMatch1.0.23

gnugnutlsMatch1.0.24

gnugnutlsMatch1.2.0

gnugnutlsMatch1.2.1

gnugnutlsMatch1.2.2

VendorProductVersionCPE
gnugnutls1.0.18cpe:2.3:a:gnu:gnutls:1.0.18:*:*:*:*:*:*:*
gnugnutls1.0.19cpe:2.3:a:gnu:gnutls:1.0.19:*:*:*:*:*:*:*
gnugnutls1.0.20cpe:2.3:a:gnu:gnutls:1.0.20:*:*:*:*:*:*:*
gnugnutls1.0.21cpe:2.3:a:gnu:gnutls:1.0.21:*:*:*:*:*:*:*
gnugnutls1.0.22cpe:2.3:a:gnu:gnutls:1.0.22:*:*:*:*:*:*:*
gnugnutls1.0.23cpe:2.3:a:gnu:gnutls:1.0.23:*:*:*:*:*:*:*
gnugnutls1.0.24cpe:2.3:a:gnu:gnutls:1.0.24:*:*:*:*:*:*:*
gnugnutls1.2.0cpe:2.3:a:gnu:gnutls:1.2.0:*:*:*:*:*:*:*
gnugnutls1.2.1cpe:2.3:a:gnu:gnutls:1.2.1:*:*:*:*:*:*:*
gnugnutls1.2.2cpe:2.3:a:gnu:gnutls:1.2.2:*:*:*:*:*:*:*

Vendor	Product	Version	CPE
gnu	gnutls	1.0.18	cpe:2.3:a:gnu:gnutls:1.0.18:::::::*
gnu	gnutls	1.0.19	cpe:2.3:a:gnu:gnutls:1.0.19:::::::*
gnu	gnutls	1.0.20	cpe:2.3:a:gnu:gnutls:1.0.20:::::::*
gnu	gnutls	1.0.21	cpe:2.3:a:gnu:gnutls:1.0.21:::::::*
gnu	gnutls	1.0.22	cpe:2.3:a:gnu:gnutls:1.0.22:::::::*
gnu	gnutls	1.0.23	cpe:2.3:a:gnu:gnutls:1.0.23:::::::*
gnu	gnutls	1.0.24	cpe:2.3:a:gnu:gnutls:1.0.24:::::::*
gnu	gnutls	1.2.0	cpe:2.3:a:gnu:gnutls:1.2.0:::::::*
gnu	gnutls	1.2.1	cpe:2.3:a:gnu:gnutls:1.2.1:::::::*
gnu	gnutls	1.2.2	cpe:2.3:a:gnu:gnutls:1.2.2:::::::*