CVE-2008-1949

The gnutlsrecvclientkxmessage function in lib/gnutlskx.c in libgnutls in gnutls-serv in GnuTLS before 2.2.4 continues to process Client Hello messages within a TLS message after one has already been processed, which allows remote attackers to cause a denial of service NULL dereference and crash v...

CVE-2008-1948

CVE-2008-1948 affects GnuTLS before 2.2.4. The _gnutls_server_name_recv_params function in libext_server_name.c within libgnutls/gnutls-serv mishandles the Server Names count in TLS 1.0 Client Hello extensions, causing a buffer overflow in session resumption data and potentially a crash or arbitr...

CVE-2008-1949

CVE-2008-1949 affects the GnuTLS stack (libgnutls in gnutls-serv). The flaw is in _gnutls_recv_client_kx_message, which can erroneously continue processing Client Hello messages within a TLS record after one has been handled, causing a NULL dereference and a crash (denial of service). Affected co...