5353 matches found
PT-2021-27406
Name of the Vulnerable Software and Affected Versions: GnuTLS affected versions not specified Description: The issue is related to a heap-use-after-free error, which occurs when the program attempts to access memory that has already been freed. This can lead to a crash. The error is specifically...
OSV-2017-62 Use-of-uninitialized-value in gnutls_memset
OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=1493 Crash type: Use-of-uninitialized-value Crash state: gnutlsmemset deinitkeys gnutlshandshakeinternalstateclear...
OSV-2021-147 Use-of-uninitialized-value in gnutls_ocsp_resp_get_status
OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=1492 Crash type: Use-of-uninitialized-value Crash state: gnutlsocsprespgetstatus gnutlsocsprespimport start...
OSV-2018-121 Use-of-uninitialized-value in _gnutls_x509_read_pkalgo_params
OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=10135 Crash type: Use-of-uninitialized-value Crash state: gnutlsx509readpkalgoparams printcrtpubkey printcert...
OSV-2018-92 Use-of-uninitialized-value in _gnutls_x509_get_time
OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=10125 Crash type: Use-of-uninitialized-value Crash state: gnutlsx509gettime gnutlsx509crtgetexpirationtime gnutlscheckcertsanity...
PT-2021-27475
Name of the Vulnerable Software and Affected Versions: No specific software or versions are mentioned in the provided description. Description: The issue is related to a crash caused by the use of an uninitialized value. The crash occurs in the gnutls x509 read pkalgo params function, which is pa...
PT-2021-27630
Name of the Vulnerable Software and Affected Versions: No specific software or versions are mentioned in the provided description. Description: The issue is related to a crash caused by a use-of-uninitialized-value error. The crash occurs in the following functions: read pbkdf2 params, gnutls rea...
PT-2021-27527
Name of the Vulnerable Software and Affected Versions: GnuTLS affected versions not specified Description: The issue is related to a crash caused by the use of an uninitialized value. The crash occurs in the decode pkcs12 auth safe function, which is called by gnutls pkcs12 get bag and gnutls...
PT-2021-27526
Name of the Vulnerable Software and Affected Versions: No specific software or versions are mentioned in the provided description. Description: The issue is related to a crash caused by the use of an uninitialized value. The crash occurs in the decode complex string function, which is called by...
PT-2021-27442
Name of the Vulnerable Software and Affected Versions: GnuTLS affected versions not specified Description: The issue is related to a crash caused by the use of an uninitialized value. Technical details about the crash include the involvement of specific functions such as gnutls mpi dprint size,...
PT-2021-27641
Name of the Vulnerable Software and Affected Versions: GnuTLS affected versions not specified Description: The issue is related to a crash caused by the use of an uninitialized value. The crash occurs in the gnutls x509 get time function, which is called by gnutls x509 crt get expiration time and...
PT-2021-27862
Name of the Vulnerable Software and Affected Versions GnuTLS affected versions not specified Description The issue is related to a crash caused by the use of an uninitialized value. The crash occurs in the gnutls ocsp resp get status and gnutls ocsp resp import functions. Recommendations At the...
PT-2021-27476
Name of the Vulnerable Software and Affected Versions: GnuTLS affected versions not specified Description: The issue is related to a crash caused by the use of an uninitialized value. The crash occurs in the gnutls pkcs12 get bag function, which is called by gnutls pkcs12 simple parse. This is...
PT-2021-27435
Name of the Vulnerable Software and Affected Versions: GnuTLS affected versions not specified Description: The issue is related to a crash caused by the use of an uninitialized value. Technical details about the crash include the involvement of gnutls memset, deinit keys, and gnutls handshake...
PT-2021-27534
Name of the Vulnerable Software and Affected Versions: No specific software or versions are mentioned in the provided description. Description: The issue is related to a crash caused by the use of an uninitialized value. The crash occurs in the pkcs12 decode safe contents and parse safe contents...
Debian DLA-2515-1 : csync2 security update
It was discovered that csync2, a cluster synchronization tool, did not correctly check for the return value from GnuTLS security routines. It neglected to repeatedly call this function as required by the design of the API. For Debian 9 'Stretch', this problem has been fixed in version...
DEBIAN-CVE-2019-15523
An issue was discovered in LINBIT csync2 through 2.0. It does not correctly check for the return value GNUTLSEWARNINGALERTRECEIVED of the gnutlshandshake function. It neglects to call this function again, as required by the design of the API...
UBUNTU-CVE-2019-15523
An issue was discovered in LINBIT csync2 through 2.0. It does not correctly check for the return value GNUTLSEWARNINGALERTRECEIVED of the gnutlshandshake function. It neglects to call this function again, as required by the design of the API...
CVE-2019-15523
CVE-2019-15523 affects LINBIT csync2 up to version 2.0. The issue stems from not correctly checking the GNUTLS_E_WARNING_ALERT_RECEIVED return value from gnutls_handshake() and failing to call it again as required by the API design, which may lead to improper TLS handling. Publicly documented imp...
CVE-2019-15523
An issue was discovered in LINBIT csync2 through 2.0. It does not correctly check for the return value GNUTLSEWARNINGALERTRECEIVED of the gnutlshandshake function. It neglects to call this function again, as required by the design of the API...