Security Bulletin: Vulnerabilities in GnuTLS affect PowerKVM

Summary PowerKVM is affected by vulnerabilities in GnuTLS. IBM has now addressed these vulnerabilities. Vulnerability Details CVEID: CVE-2017-7869 DESCRIPTION: GnuTLS is vulnerable to a denial of service, caused by an integer overflow and heap-based buffer overflow in cdkpktread function in...

Security Bulletin: Vulnerabilities in GnuTLS and OpenSSL affect IBM Flex System Manager (FSM) (CVE-2016-8610)

Summary Vulnerabilities have been discovered in GnuTLS and OpenSSL used by IBM FSM. These issues are addressed in this bulletin. Vulnerability Details CVEID: CVE-2016-8610 DESCRIPTION: The SSL/TLS protocol is vulnerable to a denial of service, caused by an error when processing ALERT packets duri...

Security Bulletin: Multiple vulnerabilities in gnutls affect IBM Flex System Manager(FSM) (CVE-2015-2806, CVE-2015-8313)

Summary Multiple security vulnerabilities have been discovered in gnutls that is embedded in the IBM FSM. This bulletin addresses these vulnerabilities. Vulnerability Details CVEID: CVE-2015-2806 DESCRIPTION: An unspecified error in libtasn1 related to asn1derdecoding has an unknown impact and...

Security Bulletin: TS3000 code level v7.x affected by Open Source GnuTLS cyrpto issue (CVE-2014-0092)

Summary Security vulnerability CVE-2014-0092 has been found that affects certain level of TSSC code Vulnerability Details TSSC-CVE-2014-0092.doc...

Security Bulletin: Vulnerability in Gnu Transport Layer Security (GnuTLS) affects IBM SmartCloud Provisioning 2.1 for IBM Provided Software Virtual Appliance (CVE-2014-3466).

Summary Vulnerability in Gnu Transport Layer Security GnuTLS affects IBM SmartCloud Provisioning 2.1 for IBM Provided Software Virtual Appliance CVE-2014-3466. Vulnerability Details CVE ID: CVE-2014-3466 DESCRIPTION: The GnuTLS library provides support for cryptographic algorithms and for protoco...

Security Bulletin: IBM Security Access Manager Appliance is affected by GnuTLS vulnerabilities

Summary IBM Security Access Manager Appliance has addressed the following vulnerabilities in the GnuTLS packages used by the appliance. Vulnerability Details CVEID: CVE-2017-7869 DESCRIPTION: GnuTLS is vulnerable to a denial of service, caused by an integer overflow and heap-based buffer overflow...

[ASA-201805-18] libcurl-gnutls: multiple issues

Arch Linux Security Advisory ASA-201805-18 ========================================== Severity: Critical Date : 2018-05-18 CVE-ID : CVE-2018-1000300 CVE-2018-1000301 Package : libcurl-gnutls Type : multiple issues Remote : Yes Link : https://security.archlinux.org/AVG-699 Summary ======= The...

[ASA-201805-16] lib32-libcurl-gnutls: multiple issues

Arch Linux Security Advisory ASA-201805-16 ========================================== Severity: Critical Date : 2018-05-18 CVE-ID : CVE-2018-1000300 CVE-2018-1000301 Package : lib32-libcurl-gnutls Type : multiple issues Remote : Yes Link : https://security.archlinux.org/AVG-697 Summary ======= Th...

gnutls/gnutls_psk_server_fuzzer: Use-of-uninitialized-value in psk_ke_modes_recv_params

Project: https://gitlab.com/gnutls/gnutls.git Detailed report: https://oss-fuzz.com/testcase?key=6230886388334592 Project: gnutls Fuzzer: libFuzzergnutlspskserverfuzzer Fuzz target binary: gnutlspskserverfuzzer Job Type: libfuzzermsangnutls Platform Id: linux Crash Type: Use-of-uninitialized-valu...

[ASA-201803-20] lib32-libcurl-gnutls: multiple issues

Arch Linux Security Advisory ASA-201803-20 ========================================== Severity: Medium Date : 2018-03-19 CVE-ID : CVE-2018-1000120 CVE-2018-1000121 CVE-2018-1000122 Package : lib32-libcurl-gnutls Type : multiple issues Remote : Yes Link : https://security.archlinux.org/AVG-656...

[ASA-201803-19] libcurl-gnutls: multiple issues

Arch Linux Security Advisory ASA-201803-19 ========================================== Severity: Medium Date : 2018-03-19 CVE-ID : CVE-2018-1000120 CVE-2018-1000121 CVE-2018-1000122 Package : libcurl-gnutls Type : multiple issues Remote : Yes Link : https://security.archlinux.org/AVG-661 Summary...

Apache mod-gnutls Certificate Spoofing Vulnerability

Apache mod-gnutls is an extension to Apache httpd which provides HTTPS services through the use of the GnuTLS library from the Apache Software Foundation USA. A security vulnerability exists in Apache mod-gnutls that stems from the program's failure to validate client certificates. A remote...

Design/Logic Flaw

mod-gnutls does not validate client certificates when "GnuTLSClientVerify require" is set in a directory context, which allows remote attackers to spoof clients via a crafted certificate...

CVE-2009-5144

mod-gnutls does not validate client certificates when "GnuTLSClientVerify require" is set in a directory context, which allows remote attackers to spoof clients via a crafted certificate...

CVE-2009-5144

mod-gnutls does not validate client certificates when "GnuTLSClientVerify require" is set in a directory context, which allows remote attackers to spoof clients via a crafted certificate...

CVE-2009-5144

Summary: CVE-2009-5144 affects the Apache mod-gnutls module, which integrates GnuTLS with Apache HTTP Server. The vulnerability is that mod-gnutls does not validate client certificates when the directory context is configured with "GnuTLSClientVerify require", allowing a remote attacker to spoof ...

CVE-2009-5144

Removed by vendor...

CVE-2009-5144

mod-gnutls does not validate client certificates when "GnuTLSClientVerify require" is set in a directory context, which allows remote attackers to spoof clients via a crafted certificate...

[ASA-201801-24] libcurl-gnutls: multiple issues

Arch Linux Security Advisory ASA-201801-24 ========================================== Severity: Medium Date : 2018-01-29 CVE-ID : CVE-2018-1000005 CVE-2018-1000007 Package : libcurl-gnutls Type : multiple issues Remote : Yes Link : https://security.archlinux.org/AVG-596 Summary ======= The packag...

[ASA-201801-25] lib32-libcurl-gnutls: multiple issues

Arch Linux Security Advisory ASA-201801-25 ========================================== Severity: Medium Date : 2018-01-29 CVE-ID : CVE-2018-1000005 CVE-2018-1000007 Package : lib32-libcurl-gnutls Type : multiple issues Remote : Yes Link : https://security.archlinux.org/AVG-597 Summary ======= The...