4795 matches found
K000151130: GnuTLS vulnerability CVE-2024-12243
Security Advisory Description A flaw was found in GnuTLS, which relies on libtasn1 for ASN.1 data processing. Due to an inefficient algorithm in libtasn1, decoding certain DER-encoded certificate data can take excessive time, leading to increased resource consumption. This flaw allows a remote...
Security update for gnutls
This update for gnutls fixes the following issues: CVE-2024-12243: Fixed inefficient DER Decoding in libtasn1 which could lead to remote DoS bsc1236974. Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST onlineupdate or "zypper patch"...
SUSE-SU-2025:20297-1 Security update for gnutls
This update for gnutls fixes the following issues: - CVE-2024-12243: Fixed inefficient DER Decoding in libtasn1 which could lead to remote DoS bsc1236974...
Security Bulletin: IBM Cloud Transformation Advisor is vulnerable to multiple vulnerabilities
Summary IBM Cloud Transformation Advisor has addressed multiple security vulnerabilities listed herein. Vulnerability Details CVEID:CVE-2023-49569 DESCRIPTION: go-git could allow a remote attacker to traverse directories on the system. By sending a specially crafted request using the ChrootOS...
Security Bulletin: Security vulnerabilities affect multiple packages shipped with IBM CICS TX Advanced.
Summary IBM CICS TX Advanced is impacted by security vulnerabilities found in packages GLib2.0, libxml2, glibc , krb5 Kerberos, libtasn1-6, Expat, OpenSSL, GnuTLS and curl. These are shipped as part of the product. Vulnerability Details CVEID:CVE-2024-12133 DESCRIPTION: A flaw in libtasn1 causes...
Security Bulletin: Multiple Vulnerabilities in IBM webMethods API Management
Summary Multiple vulnerabilities were addressed in the latest fix release for IBM webMethods API Management 11.1 Vulnerability Details CVEID:CVE-2024-23672 DESCRIPTION: Denial of Service via incomplete cleanup vulnerability in Apache Tomcat. It was possible for WebSocket clients to keep WebSocket...
Oracle Linux 8 : gnutls (ELSA-2025-20284)
The remote Oracle Linux 8 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2025-20284 advisory. - Backport the fix for CVE-2024-12243 Tenable has extracted the preceding description block directly from the Oracle Linux security advisory. Note that Nessus...
RHSA-2025:4051 Red Hat Security Advisory: gnutls security update
Bulletin has no description...
Oracle Linux 8 : gnutls (ELSA-2025-4051)
The remote Oracle Linux 8 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2025-4051 advisory. 3.6.16-8.3 - Backport the fix for CVE-2024-12243 Tenable has extracted the preceding description block directly from the Oracle Linux security advisory. Note th...
Moderate: Red Hat Security Advisory: gnutls security update
An update for gnutls is now available for Red Hat Enterprise Linux 8. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the...
gnutls: GnuTLS Impacted by Inefficient DER Decoding in libtasn1 Leading to Remote DoS
A flaw was found in GnuTLS, which relies on libtasn1 for ASN.1 data processing. Due to an inefficient algorithm in libtasn1, decoding certain DER-encoded certificate data can take excessive time, leading to increased resource consumption. This flaw allows a remote attacker to send a specially...
RHEL 8 : gnutls (RHSA-2025:4051)
The remote Redhat Enterprise Linux 8 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2025:4051 advisory. The gnutls packages provide the GNU Transport Layer Security GnuTLS library, which implements cryptographic algorithms and protocols such as SSL, TLS...
Azure Linux 3.0 Security Update: gnutls (CVE-2024-12243)
The version of gnutls installed on the remote Azure Linux 3.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2024-12243 advisory. - A flaw was found in GnuTLS, which relies on libtasn1 for ASN.1 data processing. Due to an inefficient...
CVE-2024-12243 affecting package gnutls for versions less than 3.8.3-4
CVE-2024-12243 affecting package gnutls for versions less than 3.8.3-4. A patched version of the package is available...
ALSA-2025:4051 Moderate: gnutls security update
The gnutls packages provide the GNU Transport Layer Security GnuTLS library, which implements cryptographic algorithms and protocols such as SSL, TLS, and DTLS. Security Fixes: gnutls: GnuTLS Impacted by Inefficient DER Decoding in libtasn1 Leading to Remote DoS CVE-2024-12243 For more details...
Moderate: gnutls security update
The gnutls packages provide the GNU Transport Layer Security GnuTLS library, which implements cryptographic algorithms and protocols such as SSL, TLS, and DTLS. Security Fixes: gnutls: GnuTLS Impacted by Inefficient DER Decoding in libtasn1 Leading to Remote DoS CVE-2024-12243 For more details...
Security Bulletin: IBM QRadar Network Packet Capture includes components with multiple known vulnerabilities
Summary The product includes multiple vulnerable components e.g., framework libraries that could be identified and exploited with automated tools. IBM has addressed the relevant CVEs. Vulnerability Details CVEID:CVE-2024-0553 DESCRIPTION: GnuTLS could allow a remote attacker to obtain sensitive...
CVE-2024-12133 affecting package gnutls for versions less than 3.8.3-3
CVE-2024-12133 affecting package gnutls for versions less than 3.8.3-3. A patched version of the package is available...