CVE-2025-32988

A flaw was found in GnuTLS. A double-free vulnerability exists in GnuTLS due to incorrect ownership handling in the export logic of Subject Alternative Name SAN entries containing an otherName. If the type-id OID is invalid or malformed, GnuTLS will call asn1deletestructure on an ASN.1 node it do...

Double Free

Overview Affected versions of this package are vulnerable to Double Free in the export logic of Subject Alternative Name SAN entries containing an otherName. An attacker can cause memory corruption or denial of service by providing a malformed or invalid type-id OID that leads to improper memory...

The vulnerability of the OpenSSL library lies in the possibility of reading an incorrect address in memory during the comparison of the subject name “otherName” with a X.509 certificate. This allows a malicious actor to cause a service failure.

The vulnerability of the OpenSSL library is related to the reading of an incorrect address in memory during the comparison of the subject name “otherName” with the X.509 certificate’s name. Exploiting this vulnerability could allow a malicious actor to cause service failures...

SUSE CVE-2024-6119

Issue summary: Applications performing certificate name checks e.g., TLS clients checking server certificates may attempt to read an invalid memory address resulting in abnormal termination of the application process. Impact summary: Abnormal termination of an application can a cause a denial of...

ALPINE-CVE-2024-6119

Issue summary: Applications performing certificate name checks e.g., TLS clients checking server certificates may attempt to read an invalid memory address resulting in abnormal termination of the application process. Impact summary: Abnormal termination of an application can a cause a denial of...

AZL-48747 CVE-2024-6119 affecting package edk2 for versions less than 20240524git3e722403cd16-3

Issue summary: Applications performing certificate name checks e.g., TLS clients checking server certificates may attempt to read an invalid memory address resulting in abnormal termination of the application process. Impact summary: Abnormal termination of an application can a cause a denial of...