Lucene search

K
mageiaGentoo FoundationMGASA-2014-0458
HistoryNov 15, 2014 - 9:31 p.m.

Updated gnutls package fix security vulnerability

2014-11-1521:31:46
Gentoo Foundation
advisories.mageia.org
10

0.011 Low

EPSS

Percentile

84.5%

An out-of-bounds memory write flaw was found in the way GnuTLS parsed certain ECC (Elliptic Curve Cryptography) certificates or certificate signing requests (CSR). A malicious user could create a specially crafted ECC certificate or a certificate signing request that, when processed by an application compiled against GnuTLS (for example, certtool), could cause that application to crash or execute arbitrary code with the permissions of the user running the application (CVE-2014-8564).

OSVersionArchitecturePackageVersionFilename
Mageia3noarchgnutls< 3.1.16-1.4gnutls-3.1.16-1.4.mga3
Mageia4noarchgnutls< 3.2.7-1.4gnutls-3.2.7-1.4.mga4