Lucene search

K
ubuntuUbuntuUSN-2403-1
HistoryNov 11, 2014 - 12:00 a.m.

GnuTLS vulnerability

2014-11-1100:00:00
ubuntu.com
28

7.2 High

AI Score

Confidence

Low

0.011 Low

EPSS

Percentile

84.5%

Releases

  • Ubuntu 14.10

Packages

  • gnutls28 - GNU TLS library - commandline utilities

Details

Sean Burford discovered that GnuTLS incorrectly handled printing certain
elliptic curve parameters. A malicious remote server or client could use
this issue to cause GnuTLS to crash, resulting in a denial of service, or
possibly execute arbitrary code.

OSVersionArchitecturePackageVersionFilename
Ubuntu14.10noarchgnutls-bin< 3.2.16-1ubuntu2.1UNKNOWN
Ubuntu14.10noarchguile-gnutls< 3.2.16-1ubuntu2.1UNKNOWN
Ubuntu14.10noarchlibgnutls-deb0-28< 3.2.16-1ubuntu2.1UNKNOWN
Ubuntu14.10noarchlibgnutls-dev< 3.2.16-1ubuntu2.1UNKNOWN
Ubuntu14.10noarchlibgnutls-openssl27< 3.2.16-1ubuntu2.1UNKNOWN
Ubuntu14.10noarchlibgnutls28-dbg< 3.2.16-1ubuntu2.1UNKNOWN
Ubuntu14.10noarchlibgnutls28-dev< 3.2.16-1ubuntu2.1UNKNOWN
Ubuntu14.10noarchlibgnutlsxx28< 3.2.16-1ubuntu2.1UNKNOWN