Lucene search
HistoryNov 13, 2014 - 9:32 p.m.
CVE-2014-8564
5 Medium
CVSS2
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
PARTIAL
AV:N/AC:L/Au:N/C:N/I:N/A:P
6.4 Medium
AI Score
Confidence
High
0.01 Low
EPSS
Percentile
83.6%
The _gnutls_ecc_ansi_x963_export function in gnutls_ecc.c in GnuTLS 3.x before 3.1.28, 3.2.x before 3.2.20, and 3.3.x before 3.3.10 allows remote attackers to cause a denial of service (out-of-bounds write) via a crafted (1) Elliptic Curve Cryptography (ECC) certificate or (2) certificate signing requests (CSR), related to generating key IDs.
Affected configurations
Node
gnugnutlsMatch3.0
ORgnugnutlsMatch3.0.0
ORgnugnutlsMatch3.0.1
ORgnugnutlsMatch3.0.2
ORgnugnutlsMatch3.0.3
ORgnugnutlsMatch3.0.4
ORgnugnutlsMatch3.0.5
ORgnugnutlsMatch3.0.6
ORgnugnutlsMatch3.0.7
ORgnugnutlsMatch3.0.8
ORgnugnutlsMatch3.0.9
ORgnugnutlsMatch3.0.10
ORgnugnutlsMatch3.0.11
ORgnugnutlsMatch3.0.12
ORgnugnutlsMatch3.0.13
ORgnugnutlsMatch3.0.14
ORgnugnutlsMatch3.0.15
ORgnugnutlsMatch3.0.16
ORgnugnutlsMatch3.0.17
ORgnugnutlsMatch3.0.18
ORgnugnutlsMatch3.0.19
ORgnugnutlsMatch3.0.20
ORgnugnutlsMatch3.0.21
ORgnugnutlsMatch3.0.22
ORgnugnutlsMatch3.0.23
ORgnugnutlsMatch3.0.24
ORgnugnutlsMatch3.0.25
ORgnugnutlsMatch3.0.26
ORgnugnutlsMatch3.0.27
ORgnugnutlsMatch3.0.28
ORgnugnutlsMatch3.1.0
ORgnugnutlsMatch3.1.1
ORgnugnutlsMatch3.1.2
ORgnugnutlsMatch3.1.3
ORgnugnutlsMatch3.1.4
ORgnugnutlsMatch3.1.5
ORgnugnutlsMatch3.1.6
ORgnugnutlsMatch3.1.7
ORgnugnutlsMatch3.1.8
ORgnugnutlsMatch3.1.9
ORgnugnutlsMatch3.1.10
ORgnugnutlsMatch3.1.11
ORgnugnutlsMatch3.1.12
ORgnugnutlsMatch3.1.13
ORgnugnutlsMatch3.1.14
ORgnugnutlsMatch3.1.15
ORgnugnutlsMatch3.1.16
ORgnugnutlsMatch3.1.17
ORgnugnutlsMatch3.1.18
ORgnugnutlsMatch3.1.19
ORgnugnutlsMatch3.1.20
ORgnugnutlsMatch3.1.21
ORgnugnutlsMatch3.1.22
ORgnugnutlsMatch3.1.23
ORgnugnutlsMatch3.1.24
ORgnugnutlsMatch3.1.25
ORgnugnutlsMatch3.1.26
ORgnugnutlsMatch3.1.27
ORgnugnutlsMatch3.2.0
ORgnugnutlsMatch3.2.1
ORgnugnutlsMatch3.2.2
ORgnugnutlsMatch3.2.3
ORgnugnutlsMatch3.2.4
ORgnugnutlsMatch3.2.5
ORgnugnutlsMatch3.2.6
ORgnugnutlsMatch3.2.7
ORgnugnutlsMatch3.2.8
ORgnugnutlsMatch3.2.8.1
ORgnugnutlsMatch3.2.9
ORgnugnutlsMatch3.2.10
ORgnugnutlsMatch3.2.11
ORgnugnutlsMatch3.2.12
ORgnugnutlsMatch3.2.12.1
ORgnugnutlsMatch3.2.13
ORgnugnutlsMatch3.2.14
ORgnugnutlsMatch3.2.15
ORgnugnutlsMatch3.2.16
ORgnugnutlsMatch3.2.17
ORgnugnutlsMatch3.2.18
ORgnugnutlsMatch3.2.19
ORgnugnutlsMatch3.3.0-
ORgnugnutlsMatch3.3.0pre0
ORgnugnutlsMatch3.3.1
ORgnugnutlsMatch3.3.2
ORgnugnutlsMatch3.3.3
ORgnugnutlsMatch3.3.4
ORgnugnutlsMatch3.3.5
ORgnugnutlsMatch3.3.6
ORgnugnutlsMatch3.3.7
ORgnugnutlsMatch3.3.8
ORgnugnutlsMatch3.3.9
Node
redhatenterprise_linux_desktopMatch7.0
ORredhatenterprise_linux_hpc_nodeMatch7.0
ORredhatenterprise_linux_serverMatch7.0
ORredhatenterprise_linux_workstationMatch7.0
Node
opensuseopensuseMatch12.3
ORopensuseopensuseMatch13.1
ORopensuseopensuseMatch13.2
Node
canonicalubuntu_linuxMatch14.10
Related
cve
cve
CVE-2014-8564
2014-11-13 21:32:13
nessus
nessus
Scientific Linux Security Update : gnutls on SL7.x x86_64 (20141112)
2014-11-13 00:00:00
Oracle Linux 7 : gnutls (ELSA-2014-1846)
2014-11-13 00:00:00
CentOS 7 : gnutls (CESA-2014:1846)
2014-11-13 00:00:00
openvas
openvas
Ubuntu: Security Advisory (USN-2403-1)
2014-11-12 00:00:00
Mageia: Security Advisory (MGASA-2014-0458)
2022-01-28 00:00:00
RedHat Update for gnutls RHSA-2014:1846-01
2014-11-13 00:00:00
securityvulns
securityvulns
GnuTLS memory corruption
2014-11-24 00:00:00
[ MDVSA-2014:215 ] gnutls
2014-11-24 00:00:00
f5
f5
SOL15970 - GnuTLS 3.x vulnerability CVE-2014-8564
2015-01-08 00:00:00
K15970 : GnuTLS 3.x vulnerability CVE-2014-8564
2015-01-09 00:00:00
redhat
redhat
(RHSA-2014:1846) Moderate: gnutls security update
2014-11-12 00:00:00
ubuntucve
ubuntucve
CVE-2014-8564
2014-11-10 00:00:00
oraclelinux
oraclelinux
gnutls security update
2014-11-12 00:00:00
ubuntu
ubuntu
GnuTLS vulnerability
2014-11-11 00:00:00
prion
prion
Out-of-bounds
2014-11-13 21:32:00
fedora
fedora
[SECURITY] Fedora 21 Update: gnutls-3.3.10-1.fc21
2014-11-16 14:40:54
[SECURITY] Fedora 20 Update: gnutls-3.1.28-1.fc20
2014-11-13 18:22:50
cvelist
cvelist
CVE-2014-8564
2014-11-13 15:00:00
archlinux
archlinux
gnutls: out-of-bounds memory write
2014-11-12 00:00:00
centos
centos
gnutls security update
2014-11-12 12:50:47
debiancve
debiancve
CVE-2014-8564
2014-11-13 21:32:13
mageia
mageia
Updated gnutls package fix security vulnerability
2014-11-15 21:31:46
5 Medium
CVSS2
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
PARTIAL
AV:N/AC:L/Au:N/C:N/I:N/A:P
6.4 Medium
AI Score
Confidence
High
0.01 Low
EPSS
Percentile
83.6%
Related for NVD:CVE-2014-8564