Lucene search
HistoryMar 21, 2024 - 6:15 a.m.
CVE-2024-28835
gnutls
.pem
application crash
CVSS3
5
Attack Vector
LOCAL
Attack Complexity
LOW
Privileges Required
LOW
User Interaction
REQUIRED
Scope
UNCHANGED
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
HIGH
CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:N/I:N/A:H
AI Score
5.3
Confidence
High
EPSS
0
Percentile
13.0%
A flaw has been discovered in GnuTLS where an application crash can be induced when attempting to verify a specially crafted .pem bundle using the “certtool --verify-chain” command.
Related
redhatcve
redhatcve
CVE-2024-28835
2024-03-21 06:08:56
openvas
openvas
Huawei EulerOS: Security Advisory for gnutls (EulerOS-SA-2024-2237)
2024-08-21 00:00:00
Huawei EulerOS: Security Advisory for gnutls (EulerOS-SA-2024-2213)
2024-08-21 00:00:00
Huawei EulerOS: Security Advisory for gnutls (EulerOS-SA-2024-2326)
2024-09-03 00:00:00
debiancve
debiancve
CVE-2024-28835
2024-03-21 06:15:45
veracode
veracode
Denial Of Service (DoS)
2024-04-11 02:00:44
nessus
nessus
EulerOS 2.0 SP12 : gnutls (EulerOS-SA-2024-2213)
2024-08-20 00:00:00
EulerOS Virtualization 2.12.1 : gnutls (EulerOS-SA-2024-2306)
2024-09-03 00:00:00
EulerOS Virtualization 2.12.0 : gnutls (EulerOS-SA-2024-2326)
2024-09-03 00:00:00
vulnrichment
vulnrichment
CVE-2024-28835 Gnutls: potential crash during chain building/verification
2024-03-21 06:13:26
osv
osv
CVE-2024-28835
2024-03-21 06:15:45
Moderate: gnutls security update
2024-04-18 00:00:00
Moderate: gnutls security update
2024-05-10 14:32:36
ubuntucve
ubuntucve
CVE-2024-28835
2024-03-21 00:00:00
cvelist
cvelist
CVE-2024-28835 Gnutls: potential crash during chain building/verification
2024-03-21 06:13:26
cve
cve
CVE-2024-28835
2024-03-21 06:15:45
rocky
rocky
gnutls security update
2024-05-10 14:32:36
redhat
redhat
(RHSA-2024:2889) Moderate: gnutls security update
2024-05-16 11:35:49
(RHSA-2024:1879) Moderate: gnutls security update
2024-04-18 00:58:47
(RHSA-2024:2570) Moderate: gnutls security update
2024-04-30 11:38:54
ubuntu
ubuntu
GnuTLS vulnerabilities
2024-04-15 00:00:00
GnuTLS vulnerabilities
2024-04-29 00:00:00
oraclelinux
oraclelinux
gnutls security update
2024-05-08 00:00:00
gnutls security update
2024-05-07 00:00:00
gnutls security update
2024-04-18 00:00:00
fedora
fedora
[SECURITY] Fedora 38 Update: gnutls-3.8.4-1.fc38
2024-03-31 01:54:40
[SECURITY] Fedora 39 Update: gnutls-3.8.4-1.fc39
2024-03-24 01:07:12
[SECURITY] Fedora 40 Update: gnutls-3.8.5-1.fc40
2024-04-19 21:42:06
almalinux
almalinux
Moderate: gnutls security update
2024-04-18 00:00:00
Moderate: gnutls security update
2024-04-30 00:00:00
mageia
mageia
Updated gnutls packages fix security vulnerabilities
2024-03-26 11:00:24
cloudfoundry
cloudfoundry
USN-6733-1: GnuTLS vulnerabilities | Cloud Foundry
2024-05-23 00:00:00
f5
f5
K000141041: GnuTLS vulnerabilities CVE-2024-28834 and CVE-2024-28835
2024-09-12 00:00:00
slackware
slackware
[slackware-security] gnutls
2024-03-20 00:27:18
photon
photon
Moderate Photon OS Security Update - PHSA-2024-4.0-0590
2024-04-04 00:00:00
Moderate Photon OS Security Update - PHSA-2024-5.0-0240
2024-04-04 00:00:00
CVSS3
5
Attack Vector
LOCAL
Attack Complexity
LOW
Privileges Required
LOW
User Interaction
REQUIRED
Scope
UNCHANGED
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
HIGH
CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:N/I:N/A:H
AI Score
5.3
Confidence
High
EPSS
0
Percentile
13.0%
Related for NVD:CVE-2024-28835