Lucene search
UbuntuUSN-2121-1HistoryFeb 25, 2014 - 12:00 a.m.
GnuTLS vulnerability
2014-02-2500:00:00
ubuntu.com
46
CVSS2
5.8
Attack Vector
NETWORK
Attack Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
NONE
AV:N/AC:M/Au:N/C:P/I:P/A:N
AI Score
6
Confidence
Low
EPSS
0.007
Percentile
79.5%
Releases
- Ubuntu 13.10
- Ubuntu 12.10
- Ubuntu 12.04
Packages
- gnutls26 - GNU TLS library
Details
Suman Jana discovered that GnuTLS incorrectly handled version 1
intermediate certificates. This resulted in them being considered to be a
valid CA certificate by default, which was contrary to documented
behaviour.
| OS | Version | Architecture | Package | Version | Filename |
|---|---|---|---|---|---|
| Ubuntu | 13.10 | noarch | libgnutls26 | < 2.12.23-1ubuntu4.1 | UNKNOWN |
| Ubuntu | 13.10 | noarch | gnutls-bin | < 3.0.11+really2.12.23-1ubuntu4.1 | UNKNOWN |
| Ubuntu | 13.10 | noarch | libgnutls-dev | < 2.12.23-1ubuntu4.1 | UNKNOWN |
| Ubuntu | 13.10 | noarch | libgnutls-openssl27 | < 2.12.23-1ubuntu4.1 | UNKNOWN |
| Ubuntu | 13.10 | noarch | libgnutls26-dbg | < 2.12.23-1ubuntu4.1 | UNKNOWN |
| Ubuntu | 13.10 | noarch | libgnutlsxx27 | < 2.12.23-1ubuntu4.1 | UNKNOWN |
| Ubuntu | 12.10 | noarch | libgnutls26 | < 2.12.14-5ubuntu4.5 | UNKNOWN |
| Ubuntu | 12.10 | noarch | gnutls-bin | < 3.0.11+really2.12.14-5ubuntu4.5 | UNKNOWN |
| Ubuntu | 12.10 | noarch | libgnutls-dev | < 2.12.14-5ubuntu4.5 | UNKNOWN |
| Ubuntu | 12.10 | noarch | libgnutls-openssl27 | < 2.12.14-5ubuntu4.5 | UNKNOWN |
References
Related
nessus
nessus
Debian DSA-2866-1 : gnutls26 - certificate verification flaw
2014-02-24 00:00:00
Fedora 19 : mingw-gnutls-3.1.21-1.fc19 (2014-2565)
2014-02-25 00:00:00
Slackware 14.0 / 14.1 / current : gnutls (SSA:2014-050-01)
2014-02-20 00:00:00
openvas
openvas
Ubuntu Update for gnutls26 USN-2121-1
2014-03-04 00:00:00
Fedora Update for mingw-gnutls FEDORA-2014-2583
2014-02-25 00:00:00
Fedora Update for gnutls FEDORA-2014-2580
2014-02-20 00:00:00
fedora
fedora
[SECURITY] Fedora 19 Update: mingw-gnutls-3.1.21-1.fc19
2014-02-24 12:35:59
[SECURITY] Fedora 20 Update: mingw-gnutls-3.1.21-1.fc20
2014-02-24 12:28:51
[SECURITY] Fedora 20 Update: gnutls-3.1.20-3.fc20
2014-02-17 21:09:19
debian
debian
[BSA-093] Security Update for gnutls28
2014-02-22 14:11:49
[SECURITY] [DSA 2866-1] gnutls26 security update
2014-02-22 12:39:10
[SECURITY] [DSA 2866-1] gnutls26 security update
2014-02-22 12:39:10
debiancve
debiancve
CVE-2014-1959
2014-03-07 00:10:57
CVE-2009-5138
2014-03-07 00:10:53
ubuntucve
ubuntucve
CVE-2014-1959
2014-02-21 00:00:00
CVE-2009-5138
2014-03-07 00:00:00
securityvulns
securityvulns
[USN-2121-1] GnuTLS vulnerability
2014-02-28 00:00:00
GnuTLS certificates validation vulnerability
2014-02-28 00:00:00
mageia
mageia
Updated gnutls packages fix security vulnerability
2014-02-16 17:32:37
checkpoint_advisories
checkpoint_advisories
prion
prion
Design/Logic Flaw
2014-03-07 00:10:00
Code injection
2014-03-07 00:10:00
nvd
nvd
CVE-2014-1959
2014-03-07 00:10:57
CVE-2009-5138
2014-03-07 00:10:53
slackware
slackware
gnutls
2014-02-19 20:24:06
cve
cve
CVE-2014-1959
2014-03-07 00:10:57
CVE-2009-5138
2014-03-07 00:10:53
cvelist
cvelist
CVE-2014-1959
2014-03-06 18:00:00
CVE-2009-5138
2014-03-06 18:00:00
freebsd
freebsd
gnutls -- multiple certificate verification issues
2014-03-03 00:00:00
veracode
veracode
Authorization Bypass
2019-01-15 08:58:06
f5
f5
K15623 : GnuTLS vulnerability CVE-2009-5138
2014-10-17 00:00:00
altlinux
altlinux
Security fix for the ALT Linux 10 package gnutls30 version 2.12.23-alt2
2014-03-05 00:00:00
Security fix for the ALT Linux 9 package gnutls30 version 2.12.23-alt2
2014-03-05 00:00:00
gentoo
gentoo
GnuTLS: Multiple vulnerabilities
2014-06-13 00:00:00
CVSS2
5.8
Attack Vector
NETWORK
Attack Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
NONE
AV:N/AC:M/Au:N/C:P/I:P/A:N
AI Score
6
Confidence
Low
EPSS
0.007
Percentile
79.5%
Related for USN-2121-1