lib/x509/verify.c in GnuTLS before 3.1.22 and 3.2.x before 3.2.12 does not properly handle unspecified errors when verifying X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers via a crafted certificate.

OSVersionArchitecturePackageVersionFilename
Debian12allgnutls28< 3.2.11-2gnutls28_3.2.11-2_all.deb
Debian11allgnutls28< 3.2.11-2gnutls28_3.2.11-2_all.deb
Debian10allgnutls28< 3.2.11-2gnutls28_3.2.11-2_all.deb
Debian999allgnutls28< 3.2.11-2gnutls28_3.2.11-2_all.deb
Debian13allgnutls28< 3.2.11-2gnutls28_3.2.11-2_all.deb

OS	Version	Architecture	Package	Version	Filename
Debian	12	all	gnutls28	< 3.2.11-2	gnutls28_3.2.11-2_all.deb
Debian	11	all	gnutls28	< 3.2.11-2	gnutls28_3.2.11-2_all.deb
Debian	10	all	gnutls28	< 3.2.11-2	gnutls28_3.2.11-2_all.deb
Debian	999	all	gnutls28	< 3.2.11-2	gnutls28_3.2.11-2_all.deb
Debian	13	all	gnutls28	< 3.2.11-2	gnutls28_3.2.11-2_all.deb

nessus 28

prion 1

openvas 45

suse 10

centos 2

ibm 4

redhat 4

f5 2

ubuntucve 1

securityvulns 3

debian 1

mageia 1

slackware 1

checkpoint_advisories 1

checkpoint_security 1

seebug 1

veracode 1

amazon 1

cve 1

ubuntu 1

ics 1

freebsd 1

fedora 9

altlinux 2

oraclelinux 2

gentoo 1

nessus

Debian DSA-2869-1 : gnutls26 - incorrect certificate verification

2014-03-04 00:00:00

Scientific Linux Security Update : gnutls on SL6.x i386/x86_64 (20140303)

2014-03-04 00:00:00

openSUSE Security Update : gnutls (openSUSE-SU-2014:0328-1)

2014-06-13 00:00:00

prion

Code injection

2014-03-07 00:10:00

openvas

RedHat Update for gnutls RHSA-2014:0246-01

2014-03-04 00:00:00

CentOS Update for gnutls CESA-2014:0246 centos6

2014-03-12 00:00:00

Ubuntu Update for gnutls26 USN-2127-1

2014-03-12 00:00:00

suse

Security update for gnutls (critical)

2014-03-04 18:04:13

gnutls: fixed SSL certificate validation (critical)

2014-03-05 19:04:13

gnutls: fixed SSL certificate validation problems (critical)

2014-03-05 08:04:11

centos

gnutls security update

2014-03-04 21:00:04

gnutls security update

2014-03-04 20:51:10

ibm

Security Bulletin: IBM WebSphere Application Server Hypervisor GnuTLS certificate security bypass CVE-2014-0092

2021-06-03 15:23:50

Security Bulletin: TS3000 code level v7.x affected by Open Source GnuTLS cyrpto issue (CVE-2014-0092)

2022-08-20 00:54:31

Security Bulletin: TS3000 code level v7.x affected by Open Source GnuTLS cyrpto issue (CVE-2014-0092)

2018-06-18 00:08:06

redhat

(RHSA-2014:0246) Important: gnutls security update

2014-03-03 00:00:00

(RHSA-2014:0288) Important: gnutls security update

2014-03-12 00:00:00

(RHSA-2014:0247) Important: gnutls security update

2014-03-03 00:00:00

K15160 : GnuTLS vulnerability CVE-2014-0092

2014-12-12 00:00:00

SOL15160 - GnuTLS vulnerability CVE-2014-0092

2014-04-10 00:00:00

ubuntucve

CVE-2014-0092

2014-03-03 00:00:00

securityvulns

GnuTLS certificate validation bypass

2014-03-13 00:00:00

[ MDVSA-2014:048 ] gnutls

2014-03-13 00:00:00

ESA-2015-002: Unisphere Central Security Update for Multiple Vulnerabilities

2015-02-02 00:00:00

debian

[SECURITY] [DSA 2869-1] gnutls26 security update

2014-03-03 20:14:51

mageia

Updated gnutls packages fix security vulnerability

2014-03-04 00:07:34

slackware

[slackware-security] gnutls

2014-03-04 00:43:33

checkpoint_advisories

GnuTLS Certificate Verification Policy Bypass (CVE-2014-0092)

2014-05-08 00:00:00

checkpoint_security

Check Point response to GnuTLS certificate verification vulnerability (CVE-2014-0092)

2014-03-04 22:00:00

seebug

GnuTLS证书验证安全限制绕过漏洞

2014-03-05 00:00:00

veracode

Man-in-the-Middle (MitM)

2019-01-15 08:58:04

amazon

Important: gnutls

2014-03-06 14:58:00

cve

CVE-2014-0092

2014-03-07 00:10:00

ubuntu

GnuTLS vulnerability

2014-03-04 00:00:00

ics

Siemens RuggedCom ROX-based Devices Certificate Verification Vulnerability (Update A)

2018-09-06 12:00:00

freebsd

gnutls -- multiple certificate verification issues

2014-03-03 00:00:00

fedora

[SECURITY] Fedora 20 Update: mingw-gnutls-3.1.22-1.fc20

2014-03-15 15:25:21

[SECURITY] Fedora 20 Update: gnutls-3.1.20-4.fc20

2014-03-06 08:17:02

[SECURITY] Fedora 19 Update: mingw-gnutls-3.1.22-1.fc19

2014-03-15 15:22:59

altlinux

Security fix for the ALT Linux 10 package gnutls30 version 2.12.23-alt2

2014-03-05 00:00:00

Security fix for the ALT Linux 9 package gnutls30 version 2.12.23-alt2

2014-03-05 00:00:00

oraclelinux

gnutls security update

2014-03-03 00:00:00

gnutls security update

2014-03-03 00:00:00

gentoo

GnuTLS: Multiple vulnerabilities

2014-06-13 00:00:00

Products

Security Intelligence
Non-intrusive assessment
Developers SDK
Windows scanner
Linux scanner
Perimeter control tool
MSSP

Database

Vulnerabilities
Exploits
IOC
Security News
BugBounty
Popular
Wild Exploited
Top Vulnerabilities

Tools

Linux Security Scanner
API integration
Subscriptions
Plugins
Manual Audit

Learn More

Stats
API
Docs
Api-keys
License
Pricing
Glossary
FAQ

Company

Blog
Contacts
About Us
OpenSource
EULA
Brand Guideline
Privacy Policy

This site is protected by reCAPTCHA and the Google Privacy Policy and Terms of Service apply. All product names, logos, and brands are property of their respective owners. All company, product and service names used in this website are for identification purposes only. Use of these names, logos, and brands does not imply endorsement.If you are an owner of some content and want it to be removed, please contact us. Using Vulners services you are accepting Vulners services end-user license agreement

@2024 Vulners Inc

5.8 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:M/Au:N/C:P/I:P/A:N

0.075 Low

EPSS

Percentile

94.0%

JSON

Related for DEBIANCVE:CVE-2014-0092