Lucene search

RedhatCVE-2012-1573

HistoryMar 26, 2012 - 7:55 p.m.

CVE-2012-1573

2012-03-2619:55:01

CWE-310

redhat

web.nvd.nist.gov

cve-2012-1573

gnutls

libgnutls

denial of service

heap memory corruption

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:N/I:N/A:P

AI Score

8.1

Confidence

High

EPSS

0.944

Percentile

99.3%

JSON

gnutls_cipher.c in libgnutls in GnuTLS before 2.12.17 and 3.x before 3.0.15 does not properly handle data encrypted with a block cipher, which allows remote attackers to cause a denial of service (heap memory corruption and application crash) via a crafted record, as demonstrated by a crafted GenericBlockCipher structure.

Affected configurations

Nvd

Node

gnugnutlsRange≤2.12.16

gnugnutlsMatch2.0.0

gnugnutlsMatch2.0.1

gnugnutlsMatch2.0.2

gnugnutlsMatch2.0.3

gnugnutlsMatch2.0.4

gnugnutlsMatch2.1.0

gnugnutlsMatch2.1.1

gnugnutlsMatch2.1.2

gnugnutlsMatch2.1.3

gnugnutlsMatch2.1.4

gnugnutlsMatch2.1.5

gnugnutlsMatch2.1.6

gnugnutlsMatch2.1.7

gnugnutlsMatch2.1.8

gnugnutlsMatch2.2.0

gnugnutlsMatch2.2.1

gnugnutlsMatch2.2.2

gnugnutlsMatch2.2.3

gnugnutlsMatch2.2.4

gnugnutlsMatch2.2.5

gnugnutlsMatch2.3.0

gnugnutlsMatch2.3.1

gnugnutlsMatch2.3.2

gnugnutlsMatch2.3.3

gnugnutlsMatch2.3.4

gnugnutlsMatch2.3.5

gnugnutlsMatch2.3.6

gnugnutlsMatch2.3.7

gnugnutlsMatch2.3.8

gnugnutlsMatch2.3.9

gnugnutlsMatch2.3.10

gnugnutlsMatch2.3.11

gnugnutlsMatch2.4.0

gnugnutlsMatch2.4.1

gnugnutlsMatch2.4.2

gnugnutlsMatch2.4.3

gnugnutlsMatch2.5.0

gnugnutlsMatch2.6.0

gnugnutlsMatch2.6.1

gnugnutlsMatch2.6.2

gnugnutlsMatch2.6.3

gnugnutlsMatch2.6.4

gnugnutlsMatch2.6.5

gnugnutlsMatch2.6.6

gnugnutlsMatch2.7.4

gnugnutlsMatch2.8.0

gnugnutlsMatch2.8.1

gnugnutlsMatch2.8.2

gnugnutlsMatch2.8.3

gnugnutlsMatch2.8.4

gnugnutlsMatch2.8.5

gnugnutlsMatch2.8.6

gnugnutlsMatch2.10.0

gnugnutlsMatch2.10.1

gnugnutlsMatch2.10.2

gnugnutlsMatch2.10.3

gnugnutlsMatch2.10.4

gnugnutlsMatch2.10.5

gnugnutlsMatch2.12.0

gnugnutlsMatch2.12.1

gnugnutlsMatch2.12.2

gnugnutlsMatch2.12.3

gnugnutlsMatch2.12.4

gnugnutlsMatch2.12.5

gnugnutlsMatch2.12.6

gnugnutlsMatch2.12.6.1

gnugnutlsMatch2.12.7

gnugnutlsMatch2.12.8

gnugnutlsMatch2.12.9

gnugnutlsMatch2.12.10

gnugnutlsMatch2.12.11

gnugnutlsMatch2.12.12

gnugnutlsMatch2.12.13

gnugnutlsMatch2.12.14

gnugnutlsMatch2.12.15

Node

gnugnutlsMatch3.0

gnugnutlsMatch3.0.0

gnugnutlsMatch3.0.1

gnugnutlsMatch3.0.2

gnugnutlsMatch3.0.3

gnugnutlsMatch3.0.4

gnugnutlsMatch3.0.5

gnugnutlsMatch3.0.6

gnugnutlsMatch3.0.7

gnugnutlsMatch3.0.8

gnugnutlsMatch3.0.9

gnugnutlsMatch3.0.10

gnugnutlsMatch3.0.11

gnugnutlsMatch3.0.12

gnugnutlsMatch3.0.13

gnugnutlsMatch3.0.14

VendorProductVersionCPE
gnugnutls*cpe:2.3:a:gnu:gnutls:*:*:*:*:*:*:*:*
gnugnutls2.0.0cpe:2.3:a:gnu:gnutls:2.0.0:*:*:*:*:*:*:*
gnugnutls2.0.1cpe:2.3:a:gnu:gnutls:2.0.1:*:*:*:*:*:*:*
gnugnutls2.0.2cpe:2.3:a:gnu:gnutls:2.0.2:*:*:*:*:*:*:*
gnugnutls2.0.3cpe:2.3:a:gnu:gnutls:2.0.3:*:*:*:*:*:*:*
gnugnutls2.0.4cpe:2.3:a:gnu:gnutls:2.0.4:*:*:*:*:*:*:*
gnugnutls2.1.0cpe:2.3:a:gnu:gnutls:2.1.0:*:*:*:*:*:*:*
gnugnutls2.1.1cpe:2.3:a:gnu:gnutls:2.1.1:*:*:*:*:*:*:*
gnugnutls2.1.2cpe:2.3:a:gnu:gnutls:2.1.2:*:*:*:*:*:*:*
gnugnutls2.1.3cpe:2.3:a:gnu:gnutls:2.1.3:*:*:*:*:*:*:*

Vendor	Product	Version	CPE
gnu	gnutls	*	cpe:2.3:a:gnu:gnutls::::::::
gnu	gnutls	2.0.0	cpe:2.3:a:gnu:gnutls:2.0.0:::::::*
gnu	gnutls	2.0.1	cpe:2.3:a:gnu:gnutls:2.0.1:::::::*
gnu	gnutls	2.0.2	cpe:2.3:a:gnu:gnutls:2.0.2:::::::*
gnu	gnutls	2.0.3	cpe:2.3:a:gnu:gnutls:2.0.3:::::::*
gnu	gnutls	2.0.4	cpe:2.3:a:gnu:gnutls:2.0.4:::::::*
gnu	gnutls	2.1.0	cpe:2.3:a:gnu:gnutls:2.1.0:::::::*
gnu	gnutls	2.1.1	cpe:2.3:a:gnu:gnutls:2.1.1:::::::*
gnu	gnutls	2.1.2	cpe:2.3:a:gnu:gnutls:2.1.2:::::::*
gnu	gnutls	2.1.3	cpe:2.3:a:gnu:gnutls:2.1.3:::::::*