FreeBSD : gnutls -- possible overflow/Denial of service vulnerabilities (aecee357-739e-11e1-a883-001cc0a36e12)

Mu Dynamics, Inc. reports : The block cipher decryption logic in GnuTLS assumed that a record containing any data which was a multiple of the block size was valid for further decryption processing, leading to a heap corruption vulnerability. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. Th...

FreeBSD : libtasn1 -- ASN.1 length decoding vulnerability (2e7e9072-73a0-11e1-a883-001cc0a36e12)

Mu Dynamics, Inc. reports : Various functions using the ASN.1 length decoding logic in Libtasn1 were incorrectly assuming that the return value from asn1getlengthder is always less than the length of the enclosing ASN.1 structure, which is only true for valid structures and not for intentionally...

gnutls -- possible overflow/Denial of service vulnerabilities

Mu Dynamics, Inc. reports: The block cipher decryption logic in GnuTLS assumed that a record containing any data which was a multiple of the block size was valid for further decryption processing, leading to a heap corruption vulnerability...

CVE-2012-1663

Double free vulnerability in libgnutls in GnuTLS before 3.0.14 allows remote attackers to cause a denial of service application crash or possibly have unspecified other impact via a crafted certificate list...

DEBIAN-CVE-2012-1663

Double free vulnerability in libgnutls in GnuTLS before 3.0.14 allows remote attackers to cause a denial of service application crash or possibly have unspecified other impact via a crafted certificate list...

CVE-2012-1663

Double free vulnerability in libgnutls in GnuTLS before 3.0.14 allows remote attackers to cause a denial of service application crash or possibly have unspecified other impact via a crafted certificate list...

CVE-2012-1663

CVE-2012-1663 describes a double-free vulnerability in libgnutls (GnuTLS) before 3.0.14, allowing remote attackers to cause a denial of service (application crash) or potentially other impact via a crafted certificate list. Public references show exploits and advisories: exploitation activity exi...

CVE-2012-1663

Double free vulnerability in libgnutls in GnuTLS before 3.0.14 allows remote attackers to cause a denial of service application crash or possibly have unspecified other impact via a crafted certificate list...

CVE-2012-1663

Double free vulnerability in libgnutls in GnuTLS before 3.0.14 allows remote attackers to cause a denial of service application crash or possibly have unspecified other impact via a crafted certificate list...

Low: Red Hat Bug Fix Advisory: gnutls bug fix update

Updated gnutls packages that fix one bug are now available for Red Hat Enterprise Linux 5. The gnutls package provides the GNU Transport Layer Security GnuTLS library, which provides a secure layer over a transport layer using protocols such as TLS, SSL and DTLS. This update fixes the following...

gnutls: unknown hash algorithm NULL pointer derefence [GNUTLS-SA-2006-2]

The gnutlsx509oid2macalgorithm function in lib/gnutlsalgorithms.c in GnuTLS before 1.4.2 allows remote attackers to cause a denial of service crash via a crafted X.509 certificate that uses a hash algorithm that is not supported by GnuTLS, which triggers a NULL pointer dereference...

FreeBSD Ports: gnutls

The remote host is missing an update to the system as announced in the referenced advisory. VID bdec8dc2-0b3b-11e1-b722-001cc0476564 OpenVAS Vulnerability Test $ Description: Auto generated from VID bdec8dc2-0b3b-11e1-b722-001cc0476564 Authors: Thomas Reinke Copyright: Copyright c 2012 E-Soft Inc...

FreeBSD Ports: gnutls

The remote host is missing an update to the system as announced in the referenced advisory. SPDX-FileCopyrightText: 2012 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...

Gentoo Security Advisory GLSA 201110-05 (gnutls)

The remote host is missing updates announced in advisory GLSA 201110-05. SPDX-FileCopyrightText: 2012 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only OR GPL-3.0-only...

Gentoo Security Advisory GLSA 201110-05 (gnutls)

The remote host is missing updates announced in advisory GLSA 201110-05. OpenVAS Vulnerability Test $ Description: Auto generated from Gentoo's XML based advisory Authors: Thomas Reinke Copyright: Copyright c 2012 E-Soft Inc. http://www.securityspace.com Text descriptions are largely excerpted fr...

SuSE 11.1 Security Update : GnuTLS (SAT Patch Number 5684)

This update for GnuTLS provides the following fixes : - Fix typo in patch for gnutls-cli that can cause a crash. bnc659907 - Fix Buffer overflow in the gnutlssessiongetdata function in lib/gnutlssession.c , when used on a client that performs nonstandard session resumption, allows remote TLS...

Ubuntu 10.10 / 11.04 / 11.10 : curl vulnerability (USN-1346-1)

Dan Fandrich discovered that curl incorrectly handled URLs containing embedded or percent-encoded control characters. If a user or automated system were tricked into processing a specially crafted URL, arbitrary data could be injected. Note that Tenable Network Security has extracted the precedin...

CVE-2012-0390

The DTLS implementation in GnuTLS 3.0.10 and earlier executes certain error-handling code only if there is a specific relationship between a padding length and the ciphertext size, which makes it easier for remote attackers to recover partial plaintext via a timing side-channel attack, a related...

CVE-2012-0390

The DTLS implementation in GnuTLS 3.0.10 and earlier executes certain error-handling code only if there is a specific relationship between a padding length and the ciphertext size, which makes it easier for remote attackers to recover partial plaintext via a timing side-channel attack, a related...

CVE-2012-0390

The DTLS implementation in GnuTLS 3.0.10 and earlier executes certain error-handling code only if there is a specific relationship between a padding length and the ciphertext size, which makes it easier for remote attackers to recover partial plaintext via a timing side-channel attack, a related...