CVE-2005-1431
The "record packet parsing" in GnuTLS 1.2 before 1.2.3 and 1.0 before 1.0.25 allows remote...
The "record packet parsing" in GnuTLS 1.2 before 1.2.3 and 1.0 before 1.0.25 allows remote attackers to cause a denial of service, possibly related to padding bytes in gnutils_cipher.c.
Exploit likelihood
What each source reports
NVD Score used
The "record packet parsing" in GnuTLS 1.2 before 1.2.3 and 1.0 before 1.0.25 allows remote attackers to cause a denial of service, possibly related to padding bytes in gnutils_cipher.c.
- Record
CVE-2005-1431- CVSS 2.0
- 5.0 Medium
AV:N/AC:L/Au:N/C:N/I:N/A:P - Updated
- 2026-11-02
CVE List No score
The "record packet parsing" in GnuTLS 1.2 before 1.2.3 and 1.0 before 1.0.25 allows remote attackers to cause a denial of service, possibly related to padding bytes in gnutils_cipher.c.
- Record
CVE-2005-1431- Updated
- 2026-11-02
EUVDEUVD-2005-1434 No score
The "record packet parsing" in GnuTLS 1.2 before 1.2.3 and 1.0 before 1.0.25 allows remote attackers to cause a denial of service, possibly related to padding bytes in gnutils_cipher.c.
- Record
EUVD-2005-1434- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-mcj4-5q8p-wx2v No score
The "record packet parsing" in GnuTLS 1.2 before 1.2.3 and 1.0 before 1.0.25 allows remote...
The "record packet parsing" in GnuTLS 1.2 before 1.2.3 and 1.0 before 1.0.25 allows remote attackers to cause a denial of service, possibly related to padding bytes in gnutils_cipher.c.
- Record
GHSA-mcj4-5q8p-wx2v- Updated
- 2026-11-02
Affected products
Affected packages
| Package | Affected | Fixed |
|---|---|---|
gnutlsRed Hat:enterprise_linux:4::as |
before 0:1.0.20-3.2.1 | 0:1.0.20-3.2.1 |
gnutls-debuginfoRed Hat:enterprise_linux:4::as |
before 0:1.0.20-3.2.1 | 0:1.0.20-3.2.1 |
gnutls-develRed Hat:enterprise_linux:4::as |
before 0:1.0.20-3.2.1 | 0:1.0.20-3.2.1 |
gnutlsRed Hat:enterprise_linux:4::desktop |
before 0:1.0.20-3.2.1 | 0:1.0.20-3.2.1 |
gnutls-debuginfoRed Hat:enterprise_linux:4::desktop |
before 0:1.0.20-3.2.1 | 0:1.0.20-3.2.1 |
gnutls-develRed Hat:enterprise_linux:4::desktop |
before 0:1.0.20-3.2.1 | 0:1.0.20-3.2.1 |
gnutlsRed Hat:enterprise_linux:4::es |
before 0:1.0.20-3.2.1 | 0:1.0.20-3.2.1 |
gnutls-debuginfoRed Hat:enterprise_linux:4::es |
before 0:1.0.20-3.2.1 | 0:1.0.20-3.2.1 |
gnutls-develRed Hat:enterprise_linux:4::es |
before 0:1.0.20-3.2.1 | 0:1.0.20-3.2.1 |
gnutlsRed Hat:enterprise_linux:4::ws |
before 0:1.0.20-3.2.1 | 0:1.0.20-3.2.1 |
gnutls-debuginfoRed Hat:enterprise_linux:4::ws |
before 0:1.0.20-3.2.1 | 0:1.0.20-3.2.1 |
gnutls-develRed Hat:enterprise_linux:4::ws |
before 0:1.0.20-3.2.1 | 0:1.0.20-3.2.1 |
History
| Recorded | Changed | Sources |
|---|---|---|
| aliases | EUVD | |
| first indexed | CVE List, GitHub Advisories, NVD, OSV |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2005-1431 is a medium vulnerability (CVSS 5.0) in Gnu Gnutls, published May 3, 2005. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 2.22%, the 82nd percentile. Fixed in gnutls 0:1.0.20-3.2.1.
References
secunia.com/advisories/15193
redhat.com/support/errata/RHSA-2005-430.html
osvdb.org/16054
securityfocus.com/bid/13477
exchange.xforce.ibmcloud.com/vulnerabilities/20328
oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9238
Show 10 moreShow less
lists.gnupg.org/pipermail/gnutls-dev/2005-April/000858.html
securitytracker.com/id?1013861
nvd.nist.gov/vuln/detail/CVE-2005-1431
github.com/advisories/GHSA-mcj4-5q8p-wx2v
access.redhat.com/errata/RHSA-2005:430
bugzilla.redhat.com/show_bug.cgi?id=156856
security.access.redhat.com/data/csaf/v2/advisories/2005/rhsa-2005_430.json
cve.org/CVERecord?id=CVE-2005-1431