Lucene search
RootSSV:61641HistoryMar 05, 2014 - 12:00 a.m.
GnuTLS证书验证安全限制绕过漏洞
2014-03-0500:00:00
Root
www.seebug.org
18
0.075 Low
EPSS
Percentile
93.4%
BUGTRAQ ID: 65919
CVE(CAN) ID: CVE-2014-0092
GnuTLS是用于实现TLS加密协议的函数库。
GnuTLS 3.1.22, 3.2.12之前版本在实现上存在安全漏洞，X.509证书验证的错误处理不正确，可将故障证书标记为有效证书，这可使远程用户利用此漏洞绕过证书验证。
0
GnuTLS GnuTLS 3.2.12
GnuTLS GnuTLS 3.1.22
厂商补丁：
GnuTLS
目前厂商已经发布了升级补丁以修复这个安全问题，请到厂商的主页下载：
http://gnutls.org
http://gnutls.org/security.html#GNUTLS-SA-2014-2
Related
nessus
nessus
Debian DSA-2869-1 : gnutls26 - incorrect certificate verification
2014-03-04 00:00:00
Scientific Linux Security Update : gnutls on SL6.x i386/x86_64 (20140303)
2014-03-04 00:00:00
openSUSE Security Update : gnutls (openSUSE-SU-2014:0328-1)
2014-06-13 00:00:00
prion
prion
Code injection
2014-03-07 00:10:00
openvas
openvas
RedHat Update for gnutls RHSA-2014:0246-01
2014-03-04 00:00:00
CentOS Update for gnutls CESA-2014:0246 centos6
2014-03-12 00:00:00
Ubuntu Update for gnutls26 USN-2127-1
2014-03-12 00:00:00
suse
suse
Security update for gnutls (critical)
2014-03-04 18:04:13
gnutls: fixed SSL certificate validation (critical)
2014-03-05 19:04:13
gnutls: fixed SSL certificate validation problems (critical)
2014-03-05 08:04:11
centos
centos
gnutls security update
2014-03-04 21:00:04
gnutls security update
2014-03-04 20:51:10
ibm
ibm
redhat
redhat
(RHSA-2014:0246) Important: gnutls security update
2014-03-03 00:00:00
(RHSA-2014:0288) Important: gnutls security update
2014-03-12 00:00:00
(RHSA-2014:0247) Important: gnutls security update
2014-03-03 00:00:00
f5
f5
K15160 : GnuTLS vulnerability CVE-2014-0092
2014-12-12 00:00:00
SOL15160 - GnuTLS vulnerability CVE-2014-0092
2014-04-10 00:00:00
ubuntucve
ubuntucve
CVE-2014-0092
2014-03-03 00:00:00
checkpoint_advisories
checkpoint_advisories
GnuTLS Certificate Verification Policy Bypass (CVE-2014-0092)
2014-05-08 00:00:00
checkpoint_security
checkpoint_security
veracode
veracode
Man-in-the-Middle (MitM)
2019-01-15 08:58:04
amazon
amazon
Important: gnutls
2014-03-06 14:58:00
securityvulns
securityvulns
GnuTLS certificate validation bypass
2014-03-13 00:00:00
[ MDVSA-2014:048 ] gnutls
2014-03-13 00:00:00
ESA-2015-002: Unisphere Central Security Update for Multiple Vulnerabilities
2015-02-02 00:00:00
debian
debian
[SECURITY] [DSA 2869-1] gnutls26 security update
2014-03-03 20:14:51
debiancve
debiancve
CVE-2014-0092
2014-03-07 00:10:00
mageia
mageia
Updated gnutls packages fix security vulnerability
2014-03-04 00:07:34
slackware
slackware
[slackware-security] gnutls
2014-03-04 00:43:33
cve
cve
CVE-2014-0092
2014-03-07 00:10:00
ubuntu
ubuntu
GnuTLS vulnerability
2014-03-04 00:00:00
ics
ics
freebsd
freebsd
gnutls -- multiple certificate verification issues
2014-03-03 00:00:00
fedora
fedora
[SECURITY] Fedora 20 Update: mingw-gnutls-3.1.22-1.fc20
2014-03-15 15:25:21
[SECURITY] Fedora 20 Update: gnutls-3.1.20-4.fc20
2014-03-06 08:17:02
[SECURITY] Fedora 19 Update: mingw-gnutls-3.1.22-1.fc19
2014-03-15 15:22:59
altlinux
altlinux
Security fix for the ALT Linux 10 package gnutls30 version 2.12.23-alt2
2014-03-05 00:00:00
Security fix for the ALT Linux 9 package gnutls30 version 2.12.23-alt2
2014-03-05 00:00:00
oraclelinux
oraclelinux
gnutls security update
2014-03-03 00:00:00
gnutls security update
2014-03-03 00:00:00
gentoo
gentoo
GnuTLS: Multiple vulnerabilities
2014-06-13 00:00:00