Gnutls: gnutls impacted by inefficient der decoding in libtasn1 leading to remote dos

...

CBL Mariner 2.0 Security Update: gnutls (CVE-2024-12243)

The version of gnutls installed on the remote CBL Mariner 2.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2024-12243 advisory. - A flaw was found in GnuTLS, which relies on libtasn1 for ASN.1 data processing. Due to an inefficient...

Security update for gnutls

This update for gnutls fixes the following issues: CVE-2024-12243: Fixed inefficient DER decoding in libtasn1 which could lead to a remote denial-of-service bsc1236974. Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST onlineupdate or "zypper...

SUSE-SU-2025:20157-1 Security update for gnutls

This update for gnutls fixes the following issues: - CVE-2024-12243: Fixed inefficient DER decoding in libtasn1 which could lead to a remote denial-of-service bsc1236974...

Azure Linux 3.0 Security Update: gnutls / libtasn1 (CVE-2024-12133)

The version of gnutls / libtasn1 installed on the remote Azure Linux 3.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2024-12133 advisory. - A flaw in libtasn1 causes inefficient handling of specific certificate data. When processing a...

[SECURITY] [DLA 4080-1] libaws security update

Debian LTS Advisory DLA-4080-1 [email protected] https://www.debian.org/lts/security/ Andreas Henriksson March 09, 2025 https://wiki.debian.org/LTS Package : libaws Version : 20.2-2+deb11u1 CVE ID : CVE-2024-55581 Debian Bug : AdaCore released a security advisory for "Insecure defaults ...

Debian dla-4080 : libaws-bin - security update

The remote Debian 11 host has packages installed that are affected by a vulnerability as referenced in the dla-4080 advisory. ------------------------------------------------------------------------- Debian LTS Advisory DLA-4080-1 [email protected] https://www.debian.org/lts/security/...

Linux Distros Unpatched Vulnerability : CVE-2024-55581

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - When AdaCore Ada Web Server 25.0.0 is linked with GnuTLS, the default behaviour of AWS.Client is vulnerable to a man-in-the-middle attack because of lack of...

Linux Distros Unpatched Vulnerability : CVE-2024-12243

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A flaw was found in GnuTLS, which relies on libtasn1 for ASN.1 data processing. Due to an inefficient algorithm in libtasn1, decoding certain DER-encoded...

Linux Distros Unpatched Vulnerability : CVE-2021-4209

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A NULL pointer dereference flaw was found in GnuTLS. As Nettle's hash update functions internally call memcpy, providing zero-length input may cause undefined...

Linux Distros Unpatched Vulnerability : CVE-2022-1615

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In Samba, GnuTLS gnutlsrnd can fail and give predictable random values. CVE-2022-1615 Note that Nessus relies on the presence of the package as reported by the...

openSUSE Security Advisory (SUSE-SU-2025:0764-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Linux Distros Unpatched Vulnerability : CVE-2015-6251

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Double free vulnerability in GnuTLS before 3.3.17 and 3.4.x before 3.4.4 allows remote attackers to cause a denial of service via a long DistinguishedName DN...

Linux Distros Unpatched Vulnerability : CVE-2018-10844

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - It was found that the GnuTLS implementation of HMAC-SHA-256 was vulnerable to a Lucky thirteen style attack. Remote attackers could use this flaw to conduct...

Linux Distros Unpatched Vulnerability : CVE-2015-0294

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - GnuTLS before 3.3.13 does not validate that the signature algorithms match when importing a certificate. CVE-2015-0294 Note that Nessus relies on the presence o...

Linux Distros Unpatched Vulnerability : CVE-2014-3694

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - The 1 bundled GnuTLS SSL/TLS plugin and the 2 bundled OpenSSL SSL/TLS plugin in libpurple in Pidgin before 2.10.10 do not properly consider the Basic Constraint...

Linux Distros Unpatched Vulnerability : CVE-2017-5335

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - The stream reading functions in lib/opencdk/read-packet.c in GnuTLS before 3.3.26 and 3.5.x before 3.5.8 allow remote attackers to cause a denial of service...

Linux Distros Unpatched Vulnerability : CVE-2015-3308

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Double free vulnerability in lib/x509/x509ext.c in GnuTLS before 3.3.14 allows remote attackers to cause a denial of service or possibly have unspecified other...

Linux Distros Unpatched Vulnerability : CVE-2018-10845

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - It was found that the GnuTLS implementation of HMAC-SHA-384 was vulnerable to a Lucky thirteen style attack. Remote attackers could use this flaw to conduct...

Linux Distros Unpatched Vulnerability : CVE-2014-3466

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Buffer overflow in the readserverhello function in lib/gnutlshandshake.c in GnuTLS before 3.1.25, 3.2.x before 3.2.15, and 3.3.x before 3.3.4 allows remote...