GnuTLS vulnerabilities

2008-05-2100:00:00

ubuntu.com

10 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:L/Au:N/C:C/I:C/A:C

7.5 High

AI Score

Confidence

Low

0.084 Low

EPSS

Percentile

94.5%

JSON

Releases

Ubuntu 8.04
Ubuntu 7.10
Ubuntu 7.04
Ubuntu 6.06

Packages

gnutls12 -
gnutls13 -

Details

Multiple flaws were discovered in the connection handling of GnuTLS.
A remote attacker could exploit this to crash applications linked
against GnuTLS, or possibly execute arbitrary code with permissions of
the application’s user.

OSVersionArchitecturePackageVersionFilename
Ubuntu8.04noarchlibgnutls13< 2.0.4-1ubuntu2.1UNKNOWN
Ubuntu8.04noarchgnutls-bin< 2.0.4-1ubuntu2.1UNKNOWN
Ubuntu8.04noarchlibgnutls-dev< 2.0.4-1ubuntu2.1UNKNOWN
Ubuntu8.04noarchlibgnutls13-dbg< 2.0.4-1ubuntu2.1UNKNOWN
Ubuntu8.04noarchlibgnutlsxx13< 2.0.4-1ubuntu2.1UNKNOWN
Ubuntu7.10noarchlibgnutls13< 1.6.3-1ubuntu0.1UNKNOWN
Ubuntu7.10noarchgnutls-bin< 1.6.3-1ubuntu0.1UNKNOWN
Ubuntu7.10noarchlibgnutls-dev< 1.6.3-1ubuntu0.1UNKNOWN
Ubuntu7.10noarchlibgnutls13-dbg< 1.6.3-1ubuntu0.1UNKNOWN
Ubuntu7.10noarchlibgnutlsxx13< 1.6.3-1ubuntu0.1UNKNOWN

OS	Version	Architecture	Package	Version	Filename
Ubuntu	8.04	noarch	libgnutls13	< 2.0.4-1ubuntu2.1	UNKNOWN
Ubuntu	8.04	noarch	gnutls-bin	< 2.0.4-1ubuntu2.1	UNKNOWN
Ubuntu	8.04	noarch	libgnutls-dev	< 2.0.4-1ubuntu2.1	UNKNOWN
Ubuntu	8.04	noarch	libgnutls13-dbg	< 2.0.4-1ubuntu2.1	UNKNOWN
Ubuntu	8.04	noarch	libgnutlsxx13	< 2.0.4-1ubuntu2.1	UNKNOWN
Ubuntu	7.10	noarch	libgnutls13	< 1.6.3-1ubuntu0.1	UNKNOWN
Ubuntu	7.10	noarch	gnutls-bin	< 1.6.3-1ubuntu0.1	UNKNOWN
Ubuntu	7.10	noarch	libgnutls-dev	< 1.6.3-1ubuntu0.1	UNKNOWN
Ubuntu	7.10	noarch	libgnutls13-dbg	< 1.6.3-1ubuntu0.1	UNKNOWN
Ubuntu	7.10	noarch	libgnutlsxx13	< 1.6.3-1ubuntu0.1	UNKNOWN