5373 matches found
Fedora 23 : gnutls (2016-446eaaf618)
New upstream release Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues. %NASLMINLEVEL 70300 C Tenable...
GnuTLS Local Security Bypass Vulnerability
GnuTLS is a free secure communications library for implementing the SSL, TLS and DTLS protocols developed by Nikos Mavrogiannopoulos of Belgium and Simon Josefsson of Sweden, software developers. A local security bypass vulnerability exists in GnuTLS version 3.4.12, which can be exploited by an...
[SECURITY] Fedora 23 Update: gnutls-3.4.14-1.fc23
GnuTLS is a secure communications library implementing the SSL, TLS and DTLS protocols and technologies around them. It provides a simple C language application programming interface API to access the secure communications protocols as well as APIs to parse and write X.509, PKCS 12, OpenPGP and...
Fedora 23 : gnutls (2016-c61cda2beb)
New upstream release 1343258 Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues. %NASLMINLEVEL 70300 C...
Fedora 24 : gnutls (2016-266a26df2b)
New upstream release 1343258 Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues. %NASLMINLEVEL 70300 C...
[SECURITY] Fedora 24 Update: gnutls-3.4.14-1.fc24
GnuTLS is a secure communications library implementing the SSL, TLS and DTLS protocols and technologies around them. It provides a simple C language application programming interface API to access the secure communications protocols as well as APIs to parse and write X.509, PKCS 12, OpenPGP and...
Debian GNU/Linux Data Compromise
The multiple vulnerabilities in the gnutls-doc package of the Debian GNU/Linux operating system may lead to a violation of the integrity of protected information. These vulnerabilities can be exploited remotely...
Debian GNU/Linux Data Compromise
The multiple vulnerabilities in the gnutls-bin package of the Debian GNU/Linux operating system may lead to a breach of the integrity of protected information. These vulnerabilities can be exploited remotely...
VLC Media Player Data Compromise
Overfilling the buffer in the readserverhello function in lib/gnutlshandshake.c in GnuTLS allows remote servers to trigger a service failure a memory-related error or execute arbitrary code using the long session identifier in the ServerHello message...
PT-2016-4495
Name of the Vulnerable Software and Affected Versions Pidgin versions prior to 2.11.0 Description The issue is related to improper checks of return values from gnutls x509 crt init and gnutls x509 crt import functions when importing X.509 certificates, potentially leading to code execution. This...
Fedora Update for gnutls FEDORA-2016-266a26df2b
The remote host is missing an update for the SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
[SECURITY] Fedora 24 Update: gnutls-3.4.13-1.fc24
GnuTLS is a secure communications library implementing the SSL, TLS and DTLS protocols and technologies around them. It provides a simple C language application programming interface API to access the secure communications protocols as well as APIs to parse and write X.509, PKCS 12, OpenPGP and...
gnutls: arbitrary file overwrite
Setuid programs using GnuTLS could potentially allow an attacker to overwrite and corrupt arbitrary files in the filesystem. This issue was introduced in GnuTLS 3.4.12 with the GNUTLSKEYLOGFILE environment variable handling via getenv and fixed in GnuTLS 3.4.13 by switching to securegetenv where...
lib32-gnutls: arbitrary file overwrite
Setuid programs using GnuTLS could potentially allow an attacker to overwrite and corrupt arbitrary files in the filesystem. This issue was introduced in GnuTLS 3.4.12 with the GNUTLSKEYLOGFILE environment variable handling via getenv and fixed in GnuTLS 3.4.13 by switching to securegetenv where...
Fedora Update for gnutls FEDORA-2016-c61cda2beb
The remote host is missing an update for the SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
[SECURITY] Fedora 23 Update: gnutls-3.4.13-1.fc23
GnuTLS is a secure communications library implementing the SSL, TLS and DTLS protocols and technologies around them. It provides a simple C language application programming interface API to access the secure communications protocols as well as APIs to parse and write X.509, PKCS 12, OpenPGP and...
PT-2017-8493
Name of the Vulnerable Software and Affected Versions gnutls version 3.4.12 Description The issue allows remote attackers to overwrite and corrupt arbitrary files in the filesystem due to the "GNUTLS KEYLOGFILE" environment variable. Recommendations For gnutls version 3.4.12, consider restricting...
FreeBSD : gnutls -- file overwrite by setuid programs (9c196cfd-2ccc-11e6-94b0-0011d823eebd)
gnutls.org reports : Setuid programs using GnuTLS 3.4.12 could potentially allow an attacker to overwrite and corrupt arbitrary files in the filesystem. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from the FreeBSD VuXM...
