Denial Of Service (DoS)

🗓️ 11 Apr 2024 02:00:44Reported by Veracode Vulnerability DatabaseType

veracode🔗 sca.analysiscenter.veracode.com👁 26 Views

gnutls DoS vulnerability excessive resource consumption certtool verify-chain cras

Reporter	Title	Published	Views	Family All 145
IBM Security Bulletins	Security Bulletin: Execution Engine for Apache Hadoop is vulnerable to denial of service, buffer overflow and allow a local authenticated attacker to gain elevated privileges	15 Apr 202502:36	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple security vulnerabilities are addressed with IBM Business Automation Manager Open Editions 9.1.1	30 Sep 202416:04	–	ibm
IBM Security Bulletins	Security Bulletin: IBM QRadar Network Packet Capture includes components with multiple known vulnerabilities	15 Apr 202502:50	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Watson Speech Services Cartridge for IBM Cloud Pak for Data is vulnerable to multiple Operator package issues	20 Jun 202420:39	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Observability with Instana (OnPrem) is affected by Multiple Security Vulnerabilities	30 May 202411:23	–	ibm
Tenable Nessus	Amazon Linux 2023 : gnutls, gnutls-c++, gnutls-dane (ALAS2023-2024-591)	29 Apr 202400:00	–	nessus
Tenable Nessus	AlmaLinux 9 : gnutls (ALSA-2024:1879)	18 Apr 202400:00	–	nessus
Tenable Nessus	Azure Linux 3.0 Security Update: gnutls (CVE-2024-28835)	22 Jan 202600:00	–	nessus
Tenable Nessus	Debian dla-3875 : gnutls-bin - security update	5 Sep 202400:00	–	nessus
Tenable Nessus	EulerOS 2.0 SP11 : gnutls (EulerOS-SA-2024-1813)	25 Jun 202400:00	–	nessus

Vulners

Node

gnu gnutlsMatch3.8.3-r0os

AND

gnu gnutlsMatch3.8.0-r2os

AND

alpinelinux alpine_linuxMatch3.18

gnu gnutlsMatch3.8.1-r0os

AND

gnu gnutlsMatch3.8.3-r0os

AND

alpinelinux alpine_linuxMatch3.19

gnu gnutlsMatch3.8.0-r1os

AND

gnu gnutlsMatch3.7.8-r2os

AND

gnu gnutlsMatch3.6.13-r0os

AND

gnu gnutlsMatch3.8.0-r3os

AND

gnu gnutlsMatch3.7.1-r0os

AND

gnu gnutlsMatch3.6.12-r0os

AND

gnu gnutlsMatch3.8.3-r0os

AND

gnu gnutlsMatch3.7.0-r0os

AND

gnu gnutlsMatch3.7.7-r1os

AND

gnu gnutlsMatch3.7.8-r1os

AND

gnu gnutlsMatch3.8.0-r2os

AND

gnu gnutlsMatch3.8.0-r0os

AND

gnu gnutlsMatch3.7.3-r0os

AND

gnu gnutlsMatch3.7.5-r0os

AND

gnu gnutlsMatch3.7.7-r0os

AND

gnu gnutlsMatch3.7.8-r0os

AND

gnu gnutlsMatch3.7.4-r0os

AND

gnu gnutlsMatch3.8.1-r0os

AND

gnu gnutlsMatch3.7.6-r0os

AND

gnu gnutlsMatch3.8.0-r4os

AND

alpinelinux alpine_linuxMatchedge

gnu gnutlsMatch3.8.3-r0os

AND

alpinelinux alpine_linuxMatch3.20

Source	Link
secdb	www.secdb.alpinelinux.org/v3.18/main.yaml
secdb	www.secdb.alpinelinux.org/v3.19/main.yaml
access	www.access.redhat.com/security/cve/CVE-2024-28835
lists	www.lists.gnupg.org/pipermail/gnutls-help/2024-March/004845.html
security	www.security.netapp.com/advisory/ntap-20241122-0009/
openwall	www.openwall.com/lists/oss-security/2024/03/22/1
openwall	www.openwall.com/lists/oss-security/2024/03/22/2
bugzilla	www.bugzilla.redhat.com/show_bug.cgi
access	www.access.redhat.com/errata/RHSA-2024:1879
access	www.access.redhat.com/errata/RHSA-2024:2570

17 May 2024 01:03Current

7.1High risk

Vulners AI Score7.1

CVSS 3.15

EPSS0.00043

SSVC

gnutls vulnerability dos resource consumption certtool crash