Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
vulnrichmentRedhatVULNRICHMENT:CVE-2024-28835
HistoryMar 21, 2024 - 6:13 a.m.

CVE-2024-28835 Gnutls: potential crash during chain building/verification

2024-03-2106:13:26
CWE-248
redhat
github.com
8
gnutls flaw
application crash
.pem bundle
certtool command
cve-2024-28835

CVSS3

5

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

REQUIRED

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:N/I:N/A:H

AI Score

6.5

Confidence

Low

SSVC

Exploitation

none

Automatable

no

Technical Impact

partial

JSON

A flaw has been discovered in GnuTLS where an application crash can be induced when attempting to verify a specially crafted .pem bundle using the “certtool --verify-chain” command.

Related

redhatcve 1
veracode 1
debiancve 1
openvas 19
nessus 32
osv 8
ubuntucve 1
cvelist 1
cve 1
nvd 1
rocky 1
redhat 30
ubuntu 2
oraclelinux 4
fedora 3
almalinux 2
cloudfoundry 1
mageia 1
f5 1
slackware 1
photon 2
ibm 6
redhatcve
redhatcve
CVE-2024-28835
2024-03-21 06:08:56
veracode
veracode
Denial Of Service (DoS)
2024-04-11 02:00:44
debiancve
debiancve
CVE-2024-28835
2024-03-21 06:15:45
openvas
openvas
Huawei EulerOS: Security Advisory for gnutls (EulerOS-SA-2024-2237)
2024-08-21 00:00:00
Huawei EulerOS: Security Advisory for gnutls (EulerOS-SA-2024-2213)
2024-08-21 00:00:00
Huawei EulerOS: Security Advisory for gnutls (EulerOS-SA-2024-2326)
2024-09-03 00:00:00
nessus
nessus
EulerOS 2.0 SP12 : gnutls (EulerOS-SA-2024-2213)
2024-08-20 00:00:00
EulerOS Virtualization 2.12.1 : gnutls (EulerOS-SA-2024-2306)
2024-09-03 00:00:00
EulerOS Virtualization 2.12.0 : gnutls (EulerOS-SA-2024-2326)
2024-09-03 00:00:00
osv
osv
CVE-2024-28835
2024-03-21 06:15:45
Moderate: gnutls security update
2024-04-18 00:00:00
Moderate: gnutls security update
2024-05-10 14:32:36
ubuntucve
ubuntucve
CVE-2024-28835
2024-03-21 00:00:00
cvelist
cvelist
CVE-2024-28835 Gnutls: potential crash during chain building/verification
2024-03-21 06:13:26
cve
cve
CVE-2024-28835
2024-03-21 06:15:45
nvd
nvd
CVE-2024-28835
2024-03-21 06:15:45
rocky
rocky
gnutls security update
2024-05-10 14:32:36
redhat
redhat
(RHSA-2024:2889) Moderate: gnutls security update
2024-05-16 11:35:49
(RHSA-2024:1879) Moderate: gnutls security update
2024-04-18 00:58:47
(RHSA-2024:2570) Moderate: gnutls security update
2024-04-30 11:38:54
ubuntu
ubuntu
GnuTLS vulnerabilities
2024-04-15 00:00:00
GnuTLS vulnerabilities
2024-04-29 00:00:00
oraclelinux
oraclelinux
gnutls security update
2024-05-08 00:00:00
gnutls security update
2024-05-07 00:00:00
gnutls security update
2024-04-18 00:00:00
fedora
fedora
[SECURITY] Fedora 38 Update: gnutls-3.8.4-1.fc38
2024-03-31 01:54:40
[SECURITY] Fedora 39 Update: gnutls-3.8.4-1.fc39
2024-03-24 01:07:12
[SECURITY] Fedora 40 Update: gnutls-3.8.5-1.fc40
2024-04-19 21:42:06
almalinux
almalinux
Moderate: gnutls security update
2024-04-18 00:00:00
Moderate: gnutls security update
2024-04-30 00:00:00
cloudfoundry
cloudfoundry
USN-6733-1: GnuTLS vulnerabilities | Cloud Foundry
2024-05-23 00:00:00
mageia
mageia
Updated gnutls packages fix security vulnerabilities
2024-03-26 11:00:24
f5
f5
K000141041: GnuTLS vulnerabilities CVE-2024-28834 and CVE-2024-28835
2024-09-12 00:00:00
slackware
slackware
[slackware-security] gnutls
2024-03-20 00:27:18
photon
photon
Moderate Photon OS Security Update - PHSA-2024-4.0-0590
2024-04-04 00:00:00
Moderate Photon OS Security Update - PHSA-2024-5.0-0240
2024-04-04 00:00:00
ibm
ibm
Security Bulletin: IBM Watson Speech Services Cartridge for IBM Cloud Pak for Data is vulnerable to multiple Operator package issues
2024-06-20 20:39:36
Security Bulletin: IBM App Connect Enterprise Certified Container UBI updates
2024-06-03 10:05:46
Security Bulletin: IBM Observability with Instana (OnPrem) is affected by Multiple Security Vulnerabilities
2024-05-30 11:23:32

CVSS3

5

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

REQUIRED

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:N/I:N/A:H

AI Score

6.5

Confidence

Low

SSVC

Exploitation

none

Automatable

no

Technical Impact

partial

JSON
Related for VULNRICHMENT:CVE-2024-28835
redhatcve1veracode1debiancve1openvas19nessus32osv8ubuntucve1cvelist1cve1nvd1rocky1redhat30ubuntu2oraclelinux4fedora3almalinux2cloudfoundry1mageia1f51slackware1photon2ibm6