Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
freebsdFreeBSDEC6A2A1E-429D-11E5-9DAA-14DAE9D210B8
HistoryJul 20, 2015 - 12:00 a.m.

gnutls -- double free in certificate DN decoding

2015-07-2000:00:00
vuxml.freebsd.org
10

5 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:N/I:N/A:P

0.187 Low

EPSS

Percentile

96.3%

JSON

gnutls.org reports:

Kurt Roeckx reported that decoding a specific certificate with very
long DistinguishedName (DN) entries leads to double free, which may
result to a denial of service. Since the DN decoding occurs in almost
all applications using certificates it is recommended to upgrade the
latest GnuTLS version fixing the issue. Recommendation: Upgrade to
GnuTLS 3.4.4, or 3.3.17.

OSVersionArchitecturePackageVersionFilename
FreeBSDanynoarchgnutls< 3.3.17UNKNOWN

Related

slackware 2
fedora 1
f5 2
openvas 7
checkpoint_advisories 2
prion 1
cve 1
archlinux 1
securityvulns 1
nessus 9
cvelist 1
nvd 1
debiancve 1
ubuntucve 1
mageia 1
ubuntu 1
slackware
slackware
[slackware-security] gnutls
2015-08-21 23:30:43
[slackware-security] gnutls
2016-09-10 19:39:21
fedora
fedora
[SECURITY] Fedora 23 Update: gnutls-3.4.4-1.fc23
2015-09-01 03:49:46
f5
f5
SOL17335 - GnuTLS vulnerability CVE-2015-6251
2015-09-29 00:00:00
K17335 : GnuTLS vulnerability CVE-2015-6251
2015-09-29 00:00:00
openvas
openvas
Debian: Security Advisory (DSA-3334-1)
2015-08-11 00:00:00
Slackware: Security Advisory (SSA:2016-254-01)
2022-04-21 00:00:00
Debian Security Advisory DSA 3334-1 (gnutls28 - security update)
2015-08-12 00:00:00
checkpoint_advisories
checkpoint_advisories
GnuTLS DistinguishedName Decoding Double Free (CVE-2015-6251)
2015-10-26 00:00:00
GnuTLS DistinguishedName Decoding Double Free - ver 2 (CVE-2015-6251)
2016-05-31 00:00:00
prion
prion
Double free
2015-08-24 14:59:00
cve
cve
CVE-2015-6251
2015-08-24 14:59:10
archlinux
archlinux
gnutls: denial of service
2015-08-25 00:00:00
securityvulns
securityvulns
GnuTLS double free
2015-08-24 00:00:00
nessus
nessus
openSUSE Security Update : gnutls (openSUSE-2015-567)
2015-09-08 00:00:00
Fedora 23 : gnutls-3.4.4-1.fc23 (2015-13287)
2015-09-01 00:00:00
Slackware 14.0 / 14.1 / current : gnutls (SSA:2015-233-01)
2015-08-24 00:00:00
cvelist
cvelist
CVE-2015-6251
2015-08-24 14:00:00
nvd
nvd
CVE-2015-6251
2015-08-24 14:59:10
debiancve
debiancve
CVE-2015-6251
2015-08-24 14:59:10
ubuntucve
ubuntucve
CVE-2015-6251
2015-08-24 00:00:00
mageia
mageia
Updated gnutls packages fix security vulnerabilities
2015-08-25 21:17:48
ubuntu
ubuntu
GnuTLS vulnerabilities
2015-09-01 00:00:00

5 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:N/I:N/A:P

0.187 Low

EPSS

Percentile

96.3%

JSON
Related for EC6A2A1E-429D-11E5-9DAA-14DAE9D210B8
slackware2fedora1f52openvas7checkpoint_advisories2prion1cve1archlinux1securityvulns1nessus9cvelist1nvd1debiancve1ubuntucve1mageia1ubuntu1