Improper Verification Of Cryptographic Signature

🗓️ 30 Jan 2024 17:14:32Reported by Veracode Vulnerability DatabaseType

veracode🔗 sca.analysiscenter.veracode.com👁 27 Views

gnutls vulnerability: Improper Signature Verification

Reporter	Title	Published	Views	Family All 116
IBM Security Bulletins	Security Bulletin: IBM Cloud Pak for Network Automation 2.7.2 addresses multiple security vulnerabilities	24 Apr 202415:52	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Security Guardium is affected by multiple Linux Kernel vulnerabilities	15 May 202417:32	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple Vulnerabilities in CloudPak for AIOps	28 Feb 202417:18	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Storage Ceph is vulnerable to Improper Verification of Cryptographic Signature in the RHEL UBI (CVE-2024-0567)	5 Aug 202419:47	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Observability with Instana (OnPrem) is affected by Multiple Security Vulnerabilities	30 May 202411:23	–	ibm
Tenable Nessus	Amazon Linux 2023 : gnutls, gnutls-c++, gnutls-dane (ALAS2023-2024-521)	20 Feb 202400:00	–	nessus
Tenable Nessus	AlmaLinux 9 : gnutls (ALSA-2024:0533)	30 Jan 202400:00	–	nessus
Tenable Nessus	EulerOS 2.0 SP11 : gnutls (EulerOS-SA-2024-1213)	12 Mar 202400:00	–	nessus
Tenable Nessus	EulerOS 2.0 SP11 : gnutls (EulerOS-SA-2024-1235)	12 Mar 202400:00	–	nessus
Tenable Nessus	EulerOS Virtualization 2.11.1 : gnutls (EulerOS-SA-2024-1607)	15 May 202400:00	–	nessus

Vulners

Node

gnu gnutlsMatch3.8.0-r2os

AND

alpinelinux alpine_linuxMatch3.18

gnu gnutlsMatch3.8.1-r0os

AND

alpinelinux alpine_linuxMatch3.19

gnu gnutlsMatch3.7.7-r0os

AND

gnu gnutlsMatch3.7.7-r1os

AND

gnu gnutlsMatch3.7.8-r2os

AND

gnu gnutlsMatch3.7.6-r0os

AND

gnu gnutlsMatch3.8.1-r0os

AND

gnu gnutlsMatch3.7.4-r0os

AND

gnu gnutlsMatch3.8.0-r0os

AND

gnu gnutlsMatch3.7.5-r0os

AND

gnu gnutlsMatch3.7.8-r0os

AND

gnu gnutlsMatch3.6.13-r0os

AND

gnu gnutlsMatch3.8.0-r1os

AND

gnu gnutlsMatch3.8.0-r4os

AND

gnu gnutlsMatch3.7.8-r1os

AND

gnu gnutlsMatch3.7.0-r0os

AND

gnu gnutlsMatch3.7.1-r0os

AND

gnu gnutlsMatch3.8.0-r3os

AND

gnu gnutlsMatch3.7.3-r0os

AND

gnu gnutlsMatch3.8.0-r2os

AND

gnu gnutlsMatch3.6.12-r0os

AND

alpinelinux alpine_linuxMatchedge

Source	Link
secdb	www.secdb.alpinelinux.org/v3.18/main.yaml
secdb	www.secdb.alpinelinux.org/v3.19/main.yaml
secdb	www.secdb.alpinelinux.org/edge/main.yaml
access	www.access.redhat.com/security/cve/CVE-2024-0567
gitlab	www.gitlab.com/gnutls/gnutls/-/issues/1521
lists	www.lists.fedoraproject.org/archives/list/[email protected]/message/7ZEIOLORQ7N6WRPFXZSYDL2MC4LP7VFV/
lists	www.lists.fedoraproject.org/archives/list/[email protected]/message/GNXKVR5YNUEBNHAHM5GSYKBZX4W2HMN2/
lists	www.lists.gnupg.org/pipermail/gnutls-help/2024-January/004841.html
security	www.security.netapp.com/advisory/ntap-20240202-0011/
openwall	www.openwall.com/lists/oss-security/2024/01/19/3

27 Jun 2024 17:49Current

6.7Medium risk

Vulners AI Score6.7

CVSS 3.17.5

EPSS0.01611