Lucene search

[email protected]CVE-2012-1573

HistoryMar 26, 2012 - 7:55 p.m.

CVE-2012-1573

2012-03-2619:55:01

CWE-310

[email protected]

web.nvd.nist.gov

cve-2012-1573

gnutls

libgnutls

denial of service

heap memory corruption

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:N/I:N/A:P

AI Score

8.1

Confidence

High

EPSS

0.956

Percentile

99.4%

JSON

gnutls_cipher.c in libgnutls in GnuTLS before 2.12.17 and 3.x before 3.0.15 does not properly handle data encrypted with a block cipher, which allows remote attackers to cause a denial of service (heap memory corruption and application crash) via a crafted record, as demonstrated by a crafted GenericBlockCipher structure.

Affected configurations

NVD

Node

gnugnutlsRange≤2.12.16

gnugnutlsMatch2.0.0

gnugnutlsMatch2.0.1

gnugnutlsMatch2.0.2

gnugnutlsMatch2.0.3

gnugnutlsMatch2.0.4

gnugnutlsMatch2.1.0

gnugnutlsMatch2.1.1

gnugnutlsMatch2.1.2

gnugnutlsMatch2.1.3

gnugnutlsMatch2.1.4

gnugnutlsMatch2.1.5

gnugnutlsMatch2.1.6

gnugnutlsMatch2.1.7

gnugnutlsMatch2.1.8

gnugnutlsMatch2.2.0

gnugnutlsMatch2.2.1

gnugnutlsMatch2.2.2

gnugnutlsMatch2.2.3

gnugnutlsMatch2.2.4

gnugnutlsMatch2.2.5

gnugnutlsMatch2.3.0

gnugnutlsMatch2.3.1

gnugnutlsMatch2.3.2

gnugnutlsMatch2.3.3

gnugnutlsMatch2.3.4

gnugnutlsMatch2.3.5

gnugnutlsMatch2.3.6

gnugnutlsMatch2.3.7

gnugnutlsMatch2.3.8

gnugnutlsMatch2.3.9

gnugnutlsMatch2.3.10

gnugnutlsMatch2.3.11

gnugnutlsMatch2.4.0

gnugnutlsMatch2.4.1

gnugnutlsMatch2.4.2

gnugnutlsMatch2.4.3

gnugnutlsMatch2.5.0

gnugnutlsMatch2.6.0

gnugnutlsMatch2.6.1

gnugnutlsMatch2.6.2

gnugnutlsMatch2.6.3

gnugnutlsMatch2.6.4

gnugnutlsMatch2.6.5

gnugnutlsMatch2.6.6

gnugnutlsMatch2.7.4

gnugnutlsMatch2.8.0

gnugnutlsMatch2.8.1

gnugnutlsMatch2.8.2

gnugnutlsMatch2.8.3

gnugnutlsMatch2.8.4

gnugnutlsMatch2.8.5

gnugnutlsMatch2.8.6

gnugnutlsMatch2.10.0

gnugnutlsMatch2.10.1

gnugnutlsMatch2.10.2

gnugnutlsMatch2.10.3

gnugnutlsMatch2.10.4

gnugnutlsMatch2.10.5

gnugnutlsMatch2.12.0

gnugnutlsMatch2.12.1

gnugnutlsMatch2.12.2

gnugnutlsMatch2.12.3

gnugnutlsMatch2.12.4

gnugnutlsMatch2.12.5

gnugnutlsMatch2.12.6

gnugnutlsMatch2.12.6.1

gnugnutlsMatch2.12.7

gnugnutlsMatch2.12.8

gnugnutlsMatch2.12.9

gnugnutlsMatch2.12.10

gnugnutlsMatch2.12.11

gnugnutlsMatch2.12.12

gnugnutlsMatch2.12.13

gnugnutlsMatch2.12.14

gnugnutlsMatch2.12.15

Node

gnugnutlsMatch3.0

gnugnutlsMatch3.0.0

gnugnutlsMatch3.0.1

gnugnutlsMatch3.0.2

gnugnutlsMatch3.0.3

gnugnutlsMatch3.0.4

gnugnutlsMatch3.0.5

gnugnutlsMatch3.0.6

gnugnutlsMatch3.0.7

gnugnutlsMatch3.0.8

gnugnutlsMatch3.0.9

gnugnutlsMatch3.0.10

gnugnutlsMatch3.0.11

gnugnutlsMatch3.0.12

gnugnutlsMatch3.0.13

gnugnutlsMatch3.0.14

VendorProductVersionCPE
gnugnutls2.8.2cpe:/a:gnu:gnutls:2.8.2:::
gnugnutls2.3.8cpe:/a:gnu:gnutls:2.3.8:::
gnugnutls2.1.6cpe:/a:gnu:gnutls:2.1.6:::
gnugnutls2.8.4cpe:/a:gnu:gnutls:2.8.4:::
gnugnutls2.3.6cpe:/a:gnu:gnutls:2.3.6:::
gnugnutls2.12.6.1cpe:/a:gnu:gnutls:2.12.6.1:::
gnugnutlscpe:/a:gnu:gnutls::::
gnugnutls2.1.8cpe:/a:gnu:gnutls:2.1.8:::
gnugnutls2.0.3cpe:/a:gnu:gnutls:2.0.3:::
gnugnutls2.1.5cpe:/a:gnu:gnutls:2.1.5:::

Vendor	Product	Version	CPE
gnu	gnutls	2.8.2	cpe:/a:gnu:gnutls:2.8.2:::
gnu	gnutls	2.3.8	cpe:/a:gnu:gnutls:2.3.8:::
gnu	gnutls	2.1.6	cpe:/a:gnu:gnutls:2.1.6:::
gnu	gnutls	2.8.4	cpe:/a:gnu:gnutls:2.8.4:::
gnu	gnutls	2.3.6	cpe:/a:gnu:gnutls:2.3.6:::
gnu	gnutls	2.12.6.1	cpe:/a:gnu:gnutls:2.12.6.1:::
gnu	gnutls		cpe:/a:gnu:gnutls::::
gnu	gnutls	2.1.8	cpe:/a:gnu:gnutls:2.1.8:::
gnu	gnutls	2.0.3	cpe:/a:gnu:gnutls:2.0.3:::
gnu	gnutls	2.1.5	cpe:/a:gnu:gnutls:2.1.5:::