Lucene search

K
ubuntucveUbuntu.comUB:CVE-2015-0282
HistoryMar 12, 2015 - 12:00 a.m.

CVE-2015-0282

2015-03-1200:00:00
ubuntu.com
ubuntu.com
11

5 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:L/Au:N/C:N/I:P/A:N

0.005 Low

EPSS

Percentile

75.3%

GnuTLS before 3.1.0 does not verify that the RSA PKCS #1 signature
algorithm matches the signature algorithm in the certificate, which allows
remote attackers to conduct downgrade attacks via unspecified vectors.

Bugs

OSVersionArchitecturePackageVersionFilename
ubuntu10.04noarchgnutls26< 2.8.5-2ubuntu0.7UNKNOWN
ubuntu12.04noarchgnutls26< 2.12.14-5ubuntu3.9UNKNOWN
ubuntu14.04noarchgnutls26< 2.12.23-12ubuntu2.2UNKNOWN

5 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:L/Au:N/C:N/I:P/A:N

0.005 Low

EPSS

Percentile

75.3%