Ubuntu Update for gnutls26 USN-2121-1

Check for the Version of gnutls26 OpenVAS Vulnerability Test $Id: gbubuntuUSN21211.nasl 7957 2017-12-01 06:40:08Z santu $ Ubuntu Update for gnutls26 USN-2121-1 Authors: System Generated Check Copyright: Copyright C 2014 Greenbone Networks GmbH, http://www.greenbone.net This program is free...

Debian DSA-2869-1 : gnutls26 - incorrect certificate verification

Nikos Mavrogiannopoulos of Red Hat discovered an X.509 certificate verification issue in GnuTLS, an SSL/TLS library. A certificate validation could be reported sucessfully even in cases were an error would prevent all verification steps to be performed. An attacker doing a man-in-the-middle of a...

[SECURITY] [DSA 2869-1] gnutls26 security update

------------------------------------------------------------------------- Debian Security Advisory DSA-2869-1 [email protected] http://www.debian.org/security/ Yves-Alexis Perez March 03, 2014 http://www.debian.org/security/faq -...

Debian Security Advisory DSA 2869-1 (gnutls26 - incorrect certificate verification)

Nikos Mavrogiannopoulos of Red Hat discovered an X.509 certificate verification issue in GnuTLS, an SSL/TLS library. A certificate validation could be reported successfully even in cases were an error would prevent all verification steps to be performed. An attacker doing a man-in-the-middle of a...

Debian: Security Advisory (DSA-2869-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2014 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

USN-2121-1: GnuTLS vulnerability

Suman Jana discovered that GnuTLS incorrectly handled version 1 intermediate certificates. This resulted in them being considered to be a valid CA certificate by default, which was contrary to documented behaviour...

[SECURITY] [DSA 2866-1] gnutls26 security update

------------------------------------------------------------------------- Debian Security Advisory DSA-2866-1 [email protected] http://www.debian.org/security/ Salvatore Bonaccorso February 22, 2014 http://www.debian.org/security/faq -...

DSA-2866-1 gnutls26 - certificate verification flaw

Bulletin has no description...

Debian Security Advisory DSA 2866-1 (gnutls26 - certificate verification flaw)

Suman Jana reported that GnuTLS, deviating from the documented behavior, considers a version 1 intermediate certificate as a CA certificate by default. The oldstable distribution squeeze is not affected by this problem as X.509 version 1 trusted CA certificates are not allowed by default. OpenVAS...

Debian: Security Advisory (DSA-2866-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2014 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Ubuntu Update for gnutls26 USN-1843-1

Check for the Version of gnutls26 OpenVAS Vulnerability Test $Id: gbubuntuUSN18431.nasl 8483 2018-01-22 06:58:04Z teissa $ Ubuntu Update for gnutls26 USN-1843-1 Authors: System Generated Check Copyright: Copyright c 2013 Greenbone Networks GmbH, http://www.greenbone.net This program is free...

Debian DSA-2697-1 : gnutls26 - out-of-bounds array read

It was discovered that a malicious client could crash a GNUTLS server and vice versa, by sending TLS records encrypted with a block cipher which contain invalid padding. The oldstable distribution squeeze is not affected because the security fix that introduced this vulnerability was not applied ...

Ubuntu 10.04 LTS / 12.04 LTS / 12.10 / 13.04 : gnutls26 vulnerability (USN-1843-1)

It was discovered that GnuTLS incorrectly handled certain padding bytes. A remote attacker could use this flaw to cause an application using GnuTLS to crash, leading to a denial of service. Note that Tenable Network Security has extracted the preceding description block directly from the Ubuntu...

[SECURITY] [DSA 2697-1] gnutls26 security update

------------------------------------------------------------------------- Debian Security Advisory DSA-2697-1 [email protected] http://www.debian.org/security/ Florian Weimer May 29, 2013 http://www.debian.org/security/faq -...

Debian Security Advisory DSA 2697-1 (gnutls26 - out-of-bounds array read)

It was discovered that a malicious client could crash a GNUTLS server and vice versa, by sending TLS records encrypted with a block cipher which contain invalid padding. The oldstable distribution squeeze is not affected because the security fix that introduced this vulnerability was not applied ...

DSA-2697-1 gnutls26 - out-of-bounds array read

Bulletin has no description...

Debian: Security Advisory (DSA-2697-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2013 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Ubuntu: Security Advisory (USN-1752-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2013 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Ubuntu Update for gnutls26 USN-1752-1

Check for the Version of gnutls26 OpenVAS Vulnerability Test $Id: gbubuntuUSN17521.nasl 8494 2018-01-23 06:57:55Z teissa $ Ubuntu Update for gnutls26 USN-1752-1 Authors: System Generated Check Copyright: Copyright c 2013 Greenbone Networks GmbH, http://www.greenbone.net This program is free...

Ubuntu 8.04 LTS / 10.04 LTS / 11.10 / 12.04 LTS / 12.10 : gnutls13, gnutls26 vulnerability (USN-1752-1)

Nadhem Alfardan and Kenny Paterson discovered that the TLS protocol as used in GnuTLS was vulnerable to a timing side-channel attack known as the 'Lucky Thirteen' issue. A remote attacker could use this issue to perform plaintext-recovery attacks via analysis of timing data. Note that Tenable...