Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
osvGoogleOSV:CVE-2024-28835
HistoryMar 21, 2024 - 6:15 a.m.

CVE-2024-28835

2024-03-2106:15:45
Google
osv.dev
13
gnutls
application crash
vulnerability
.pem bundle
certtool --verify-chain
verify specially crafted

CVSS3

5

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

REQUIRED

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:N/I:N/A:H

AI Score

6.9

Confidence

Low

EPSS

0

Percentile

13.0%

JSON

A flaw has been discovered in GnuTLS where an application crash can be induced when attempting to verify a specially crafted .pem bundle using the “certtool --verify-chain” command.

Related

redhatcve 1
ubuntucve 1
openvas 19
cve 1
nessus 32
cvelist 1
debiancve 1
veracode 1
vulnrichment 1
nvd 1
osv 8
rocky 1
redhat 30
oraclelinux 4
ubuntu 2
almalinux 2
f5 1
fedora 3
cloudfoundry 1
mageia 1
slackware 1
photon 2
ibm 6
redhatcve
redhatcve
CVE-2024-28835
2024-03-21 06:08:56
ubuntucve
ubuntucve
CVE-2024-28835
2024-03-21 00:00:00
openvas
openvas
Huawei EulerOS: Security Advisory for gnutls (EulerOS-SA-2024-2306)
2024-09-03 00:00:00
Huawei EulerOS: Security Advisory for gnutls (EulerOS-SA-2024-2237)
2024-08-21 00:00:00
Huawei EulerOS: Security Advisory for gnutls (EulerOS-SA-2024-2213)
2024-08-21 00:00:00
cve
cve
CVE-2024-28835
2024-03-21 06:15:45
nessus
nessus
EulerOS Virtualization 2.12.0 : gnutls (EulerOS-SA-2024-2326)
2024-09-03 00:00:00
EulerOS 2.0 SP12 : gnutls (EulerOS-SA-2024-2213)
2024-08-20 00:00:00
EulerOS Virtualization 2.12.1 : gnutls (EulerOS-SA-2024-2306)
2024-09-03 00:00:00
cvelist
cvelist
CVE-2024-28835 Gnutls: potential crash during chain building/verification
2024-03-21 06:13:26
debiancve
debiancve
CVE-2024-28835
2024-03-21 06:15:45
veracode
veracode
Denial Of Service (DoS)
2024-04-11 02:00:44
vulnrichment
vulnrichment
CVE-2024-28835 Gnutls: potential crash during chain building/verification
2024-03-21 06:13:26
nvd
nvd
CVE-2024-28835
2024-03-21 06:15:45
osv
osv
Moderate: gnutls security update
2024-04-18 00:00:00
gnutls28 vulnerabilities
2024-04-29 11:38:34
Security update for gnutls
2024-07-17 12:44:32
rocky
rocky
gnutls security update
2024-05-10 14:32:36
redhat
redhat
(RHSA-2024:2889) Moderate: gnutls security update
2024-05-16 11:35:49
(RHSA-2024:1879) Moderate: gnutls security update
2024-04-18 00:58:47
(RHSA-2024:2570) Moderate: gnutls security update
2024-04-30 11:38:54
oraclelinux
oraclelinux
gnutls security update
2024-05-08 00:00:00
gnutls security update
2024-05-07 00:00:00
gnutls security update
2024-04-18 00:00:00
ubuntu
ubuntu
GnuTLS vulnerabilities
2024-04-15 00:00:00
GnuTLS vulnerabilities
2024-04-29 00:00:00
almalinux
almalinux
Moderate: gnutls security update
2024-04-30 00:00:00
Moderate: gnutls security update
2024-04-18 00:00:00
f5
f5
K000141041: GnuTLS vulnerabilities CVE-2024-28834 and CVE-2024-28835
2024-09-12 00:00:00
fedora
fedora
[SECURITY] Fedora 39 Update: gnutls-3.8.4-1.fc39
2024-03-24 01:07:12
[SECURITY] Fedora 38 Update: gnutls-3.8.4-1.fc38
2024-03-31 01:54:40
[SECURITY] Fedora 40 Update: gnutls-3.8.5-1.fc40
2024-04-19 21:42:06
cloudfoundry
cloudfoundry
USN-6733-1: GnuTLS vulnerabilities | Cloud Foundry
2024-05-23 00:00:00
mageia
mageia
Updated gnutls packages fix security vulnerabilities
2024-03-26 11:00:24
slackware
slackware
[slackware-security] gnutls
2024-03-20 00:27:18
photon
photon
Moderate Photon OS Security Update - PHSA-2024-4.0-0590
2024-04-04 00:00:00
Moderate Photon OS Security Update - PHSA-2024-5.0-0240
2024-04-04 00:00:00
ibm
ibm
Security Bulletin: IBM Watson Speech Services Cartridge for IBM Cloud Pak for Data is vulnerable to multiple Operator package issues
2024-06-20 20:39:36
Security Bulletin: IBM App Connect Enterprise Certified Container UBI updates
2024-06-03 10:05:46
Security Bulletin: IBM Observability with Instana (OnPrem) is affected by Multiple Security Vulnerabilities
2024-05-30 11:23:32

CVSS3

5

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

REQUIRED

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:N/I:N/A:H

AI Score

6.9

Confidence

Low

EPSS

0

Percentile

13.0%

JSON
Related for OSV:CVE-2024-28835
redhatcve1ubuntucve1openvas19cve1nessus32cvelist1debiancve1veracode1vulnrichment1nvd1osv8rocky1redhat30oraclelinux4ubuntu2almalinux2f51fedora3cloudfoundry1mageia1slackware1photon2ibm6