Lucene search
UbuntuUSN-2403-1HistoryNov 11, 2014 - 12:00 a.m.
GnuTLS vulnerability
2014-11-1100:00:00
ubuntu.com
35
CVSS2
5
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
PARTIAL
AV:N/AC:L/Au:N/C:N/I:N/A:P
AI Score
7.2
Confidence
Low
EPSS
0.01
Percentile
83.6%
Releases
- Ubuntu 14.10
Packages
- gnutls28 - GNU TLS library - commandline utilities
Details
Sean Burford discovered that GnuTLS incorrectly handled printing certain
elliptic curve parameters. A malicious remote server or client could use
this issue to cause GnuTLS to crash, resulting in a denial of service, or
possibly execute arbitrary code.
| OS | Version | Architecture | Package | Version | Filename |
|---|---|---|---|---|---|
| Ubuntu | 14.10 | noarch | gnutls-bin | < 3.2.16-1ubuntu2.1 | UNKNOWN |
| Ubuntu | 14.10 | noarch | guile-gnutls | < 3.2.16-1ubuntu2.1 | UNKNOWN |
| Ubuntu | 14.10 | noarch | libgnutls-deb0-28 | < 3.2.16-1ubuntu2.1 | UNKNOWN |
| Ubuntu | 14.10 | noarch | libgnutls-dev | < 3.2.16-1ubuntu2.1 | UNKNOWN |
| Ubuntu | 14.10 | noarch | libgnutls-openssl27 | < 3.2.16-1ubuntu2.1 | UNKNOWN |
| Ubuntu | 14.10 | noarch | libgnutls28-dbg | < 3.2.16-1ubuntu2.1 | UNKNOWN |
| Ubuntu | 14.10 | noarch | libgnutls28-dev | < 3.2.16-1ubuntu2.1 | UNKNOWN |
| Ubuntu | 14.10 | noarch | libgnutlsxx28 | < 3.2.16-1ubuntu2.1 | UNKNOWN |
References
Related
f5
f5
SOL15970 - GnuTLS 3.x vulnerability CVE-2014-8564
2015-01-08 00:00:00
K15970 : GnuTLS 3.x vulnerability CVE-2014-8564
2015-01-09 00:00:00
redhat
redhat
(RHSA-2014:1846) Moderate: gnutls security update
2014-11-12 00:00:00
ubuntucve
ubuntucve
CVE-2014-8564
2014-11-10 00:00:00
nessus
nessus
CentOS 7 : gnutls (CESA-2014:1846)
2014-11-13 00:00:00
Oracle Linux 7 : gnutls (ELSA-2014-1846)
2014-11-13 00:00:00
Scientific Linux Security Update : gnutls on SL7.x x86_64 (20141112)
2014-11-13 00:00:00
openvas
openvas
Ubuntu: Security Advisory (USN-2403-1)
2014-11-12 00:00:00
Mageia: Security Advisory (MGASA-2014-0458)
2022-01-28 00:00:00
SUSE: Security Advisory (SUSE-SU-2014:1628-1)
2021-04-19 00:00:00
securityvulns
securityvulns
GnuTLS memory corruption
2014-11-24 00:00:00
[ MDVSA-2014:215 ] gnutls
2014-11-24 00:00:00
cve
cve
CVE-2014-8564
2014-11-13 21:32:13
prion
prion
Out-of-bounds
2014-11-13 21:32:00
oraclelinux
oraclelinux
gnutls security update
2014-11-12 00:00:00
fedora
fedora
[SECURITY] Fedora 21 Update: gnutls-3.3.10-1.fc21
2014-11-16 14:40:54
[SECURITY] Fedora 20 Update: gnutls-3.1.28-1.fc20
2014-11-13 18:22:50
cvelist
cvelist
CVE-2014-8564
2014-11-13 15:00:00
nvd
nvd
CVE-2014-8564
2014-11-13 21:32:13
mageia
mageia
Updated gnutls package fix security vulnerability
2014-11-15 21:31:46
centos
centos
gnutls security update
2014-11-12 12:50:47
archlinux
archlinux
gnutls: out-of-bounds memory write
2014-11-12 00:00:00
debiancve
debiancve
CVE-2014-8564
2014-11-13 21:32:13
osv
osv
gnutls-3.4.15-1.1 on GA media
2024-06-15 00:00:00
CVSS2
5
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
PARTIAL
AV:N/AC:L/Au:N/C:N/I:N/A:P
AI Score
7.2
Confidence
Low
EPSS
0.01
Percentile
83.6%
Related for USN-2403-1