Lucene search
Gentoo FoundationMGASA-2014-0077HistoryFeb 16, 2014 - 5:32 p.m.
Updated gnutls packages fix security vulnerability
2014-02-1617:32:37
Gentoo Foundation
advisories.mageia.org
15
5.8 Medium
CVSS2
Access Vector
NETWORK
Access Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
NONE
AV:N/AC:M/Au:N/C:P/I:P/A:N
0.007 Low
EPSS
Percentile
79.3%
Suman Jana reported a vulnerability that affects the certificate verification functions of gnutls 3.1.x and gnutls 3.2.x. A version 1 intermediate certificate will be considered as a CA certificate by default (something that deviates from the documented behavior) (CVE-2014-1959).
| OS | Version | Architecture | Package | Version | Filename |
|---|---|---|---|---|---|
| Mageia | 3 | noarch | gnutls | < 3.1.16-1.1 | gnutls-3.1.16-1.1.mga3 |
| Mageia | 4 | noarch | gnutls | < 3.2.7-1.1 | gnutls-3.2.7-1.1.mga4 |
Related
nessus
nessus
Debian DSA-2866-1 : gnutls26 - certificate verification flaw
2014-02-24 00:00:00
Fedora 19 : mingw-gnutls-3.1.21-1.fc19 (2014-2565)
2014-02-25 00:00:00
Mandriva Linux Security Advisory : gnutls (MDVSA-2014:043)
2014-02-20 00:00:00
fedora
fedora
[SECURITY] Fedora 19 Update: mingw-gnutls-3.1.21-1.fc19
2014-02-24 12:35:59
[SECURITY] Fedora 20 Update: mingw-gnutls-3.1.21-1.fc20
2014-02-24 12:28:51
[SECURITY] Fedora 20 Update: gnutls-3.1.20-3.fc20
2014-02-17 21:09:19
openvas
openvas
Ubuntu Update for gnutls26 USN-2121-1
2014-03-04 00:00:00
Fedora Update for mingw-gnutls FEDORA-2014-2583
2014-02-25 00:00:00
Fedora Update for gnutls FEDORA-2014-2580
2014-02-20 00:00:00
debiancve
debiancve
CVE-2014-1959
2014-03-07 00:10:00
CVE-2009-5138
2014-03-07 00:10:00
debian
debian
[BSA-093] Security Update for gnutls28
2014-03-02 20:34:07
[SECURITY] [DSA 2866-1] gnutls26 security update
2014-02-22 12:39:10
[SECURITY] [DSA 2866-1] gnutls26 security update
2014-02-22 12:39:30
securityvulns
securityvulns
[USN-2121-1] GnuTLS vulnerability
2014-02-28 00:00:00
GnuTLS certificates validation vulnerability
2014-02-28 00:00:00
ubuntucve
ubuntucve
CVE-2014-1959
2014-02-21 00:00:00
CVE-2009-5138
2014-03-07 00:00:00
checkpoint_advisories
checkpoint_advisories
prion
prion
Design/Logic Flaw
2014-03-07 00:10:00
Code injection
2014-03-07 00:10:00
cve
cve
CVE-2014-1959
2014-03-07 00:10:00
CVE-2009-5138
2014-03-07 00:10:00
ubuntu
ubuntu
GnuTLS vulnerability
2014-02-25 00:00:00
slackware
slackware
gnutls
2014-02-19 20:24:06
freebsd
freebsd
gnutls -- multiple certificate verification issues
2014-03-03 00:00:00
f5
f5
K15623 : GnuTLS vulnerability CVE-2009-5138
2014-10-17 00:00:00
veracode
veracode
Authorization Bypass
2019-01-15 08:58:06
altlinux
altlinux
Security fix for the ALT Linux 10 package gnutls30 version 2.12.23-alt2
2014-03-05 00:00:00
Security fix for the ALT Linux 9 package gnutls30 version 2.12.23-alt2
2014-03-05 00:00:00
gentoo
gentoo
GnuTLS: Multiple vulnerabilities
2014-06-13 00:00:00
5.8 Medium
CVSS2
Access Vector
NETWORK
Access Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
NONE
AV:N/AC:M/Au:N/C:P/I:P/A:N
0.007 Low
EPSS
Percentile
79.3%
Related for MGASA-2014-0077