CVE-2020-24659 affecting package gnutls for versions less than 3.6.14-5

CVE-2020-24659 affecting package gnutls for versions less than 3.6.14-5. A patched version of the package is available...

CVE-2021-20231 affecting package gnutls for versions less than 3.6.14-5

CVE-2021-20231 affecting package gnutls for versions less than 3.6.14-5. A patched version of the package is available...

CVE-2021-20232 affecting package gnutls for versions less than 3.6.14-5

CVE-2021-20232 affecting package gnutls for versions less than 3.6.14-5. A patched version of the package is available...

The vulnerability of the wrap_nettle_hash_fast() function implementation in the GnuTLS cryptographic library allows a attacker to trigger a denial-of-service attack.

The vulnerability of the wrapnettlehashfast function implementation in the GnuTLS cryptographic library is related to pointer arithmetic errors. Exploiting this vulnerability could allow a remote attacker to cause a service failure...

CVE-2022-28352

WeeChat aka Wee Enhanced Environment for Chat 3.2 to 3.4 before 3.4.1 does not properly verify the TLS certificate of the server, after certain GnuTLS options are changed, which allows man-in-the-middle attackers to spoof a TLS chat server via an arbitrary certificate. NOTE: this only affects...

DEBIAN-CVE-2022-28352

WeeChat aka Wee Enhanced Environment for Chat 3.2 to 3.4 before 3.4.1 does not properly verify the TLS certificate of the server, after certain GnuTLS options are changed, which allows man-in-the-middle attackers to spoof a TLS chat server via an arbitrary certificate. NOTE: this only affects...

Code injection

WeeChat aka Wee Enhanced Environment for Chat 3.2 to 3.4 before 3.4.1 does not properly verify the TLS certificate of the server, after certain GnuTLS options are changed, which allows man-in-the-middle attackers to spoof a TLS chat server via an arbitrary certificate. NOTE: this only affects...

UBUNTU-CVE-2022-28352

WeeChat aka Wee Enhanced Environment for Chat 3.2 to 3.4 before 3.4.1 does not properly verify the TLS certificate of the server, after certain GnuTLS options are changed, which allows man-in-the-middle attackers to spoof a TLS chat server via an arbitrary certificate. NOTE: this only affects...

CVE-2022-28352

WeeChat aka Wee Enhanced Environment for Chat 3.2 to 3.4 before 3.4.1 does not properly verify the TLS certificate of the server, after certain GnuTLS options are changed, which allows man-in-the-middle attackers to spoof a TLS chat server via an arbitrary certificate. NOTE: this only affects...

CVE-2022-28352

WeeChat (Wee Enhanced Environment for Chat) versions 3.2–3.4 prior to 3.4.1 are vulnerable: after certain GnuTLS options are changed, WeeChat fails to properly verify the TLS server certificate, enabling MITM attackers to spoof a TLS chat server with an arbitrary certificate. This affects scenari...

PT-2022-18970

Name of the Vulnerable Software and Affected Versions WeeChat versions 3.2 through 3.4 before 3.4.1 Description The issue arises when certain GnuTLS options are changed without a WeeChat restart, specifically weechat.network.gnutls ca system or weechat.network.gnutls ca user. This allows...

WeeChat 信任管理问题漏洞

WeeChat is a scalable live chat client application. A security vulnerability exists in WeeChat versions 3.2 through 3.4 that stems from not properly validating the server's TLS certificate, which could allow an attacker to spoof a TLS chat server with an arbitrary certificate after certain GnuTLS...

CVE-2022-28352: Improper Certificate Validation

WeeChat aka Wee Enhanced Environment for Chat 3.2 to 3.4 before 3.4.1 does not properly verify the TLS certificate of the server, after certain GnuTLS options are changed, which allows man-in-the-middle attackers to spoof a TLS chat server via an arbitrary certificate. NOTE: this only affects...

Fedora: Security Advisory for gnutls (FEDORA-2022-f899b7971a)

The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

gnutls security update

3.6.16-4.0.1fips - Allow RSA keygen with modulus sizes bigger than 3072 bits and validate the seed length as defined in FIPS 186-4 section B.3.2 Orabug: 33200526 - Allow bigger known RSA modulus sizes when calling rsageneratefips1864keypair directly Orabug: 33200526 - Change Epoch from 1 to 10...

Oracle Linux 8 : gnutls (ELSA-2022-9221)

The remote Oracle Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2022-9221 advisory. 3.6.16-4.0.1fips - Allow RSA keygen with modulus sizes bigger than 3072 bits and validate the seed length as defined in FIPS 186-4 section B.3.2 Orabug...

Mageia: Security Advisory (MGASA-2022-0098)

The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

MGASA-2022-0098 Updated gnutls packages fix security vulnerability

Null pointer dereference in MDUPDATE. CVE-2021-4209...

Updated gnutls packages fix security vulnerability

Null pointer dereference in MDUPDATE. CVE-2021-4209...

[SECURITY] Fedora 34 Update: gnutls-3.7.2-2.fc34

GnuTLS is a secure communications library implementing the SSL, TLS and DTLS protocols and technologies around them. It provides a simple C language application programming interface API to access the secure communications protocols as well as APIs to parse and write X.509, PKCS 12, OpenPGP and...