Every CVE Search/ Get API key

CVE-2012-1573

gnutls_cipher.c in libgnutls in GnuTLS before 2.12.17 and 3.x before 3.0.15 does not properly...

5.0 MediumFix available

gnutls_cipher.c in libgnutls in GnuTLS before 2.12.17 and 3.x before 3.0.15 does not properly handle data encrypted with a block cipher, which allows remote attackers to cause a denial of service (heap memory corruption and application crash) via a crafted record, as demonstrated by a crafted GenericBlockCipher structure.

Exploit likelihood

4.15%Down 0.2 points since Feb 4, 2022
90%50%10%1%

What each source reports

NVD Score used 5.0

gnutls_cipher.c in libgnutls in GnuTLS before 2.12.17 and 3.x before 3.0.15 does not properly handle data encrypted with a block cipher, which allows remote attackers to cause a denial of service (heap memory corruption and application crash) via a crafted record, as demonstrated by a crafted GenericBlockCipher structure.

Record
CVE-2012-1573
CVSS 2.0
5.0 MediumAV:N/AC:L/Au:N/C:N/I:N/A:P
Weakness
CWE-310
Updated
2026-11-02
CVE List No score

gnutls_cipher.c in libgnutls in GnuTLS before 2.12.17 and 3.x before 3.0.15 does not properly handle data encrypted with a block cipher, which allows remote attackers to cause a denial of service (heap memory corruption and application crash) via a crafted record, as demonstrated by a crafted GenericBlockCipher structure.

Record
CVE-2012-1573
Updated
2026-11-02
EUVDEUVD-2012-1591 No score

gnutls_cipher.c in libgnutls in GnuTLS before 2.12.17 and 3.x before 3.0.15 does not properly handle data encrypted with a block cipher, which allows remote attackers to cause a denial of service (heap memory corruption and application crash) via a crafted record, as demonstrated by a crafted GenericBlockCipher structure.

Record
EUVD-2012-1591
Updated
2026-11-03
GitHub AdvisoriesGHSA-h34x-7v7j-22v5 No score

gnutls_cipher.c in libgnutls in GnuTLS before 2.12.17 and 3.x before 3.0.15 does not properly...

gnutls_cipher.c in libgnutls in GnuTLS before 2.12.17 and 3.x before 3.0.15 does not properly handle data encrypted with a block cipher, which allows remote attackers to cause a denial of service (heap memory corruption and application crash) via a crafted record, as demonstrated by a crafted GenericBlockCipher structure.

Record
GHSA-h34x-7v7j-22v5
Updated
2026-11-02
OSVBELL-CVE-2012-1573 5.0

CVE-2012-1573 does not affect BellSoft software

Record
BELL-CVE-2012-1573
CVSS 2.0
5.0 MediumAV:N/AC:L/Au:N/C:N/I:N/A:P
Updated
2026-11-02
OSV No score

gnutls_cipher.c in libgnutls in GnuTLS before 2.12.17 and 3.x before 3.0.15 does not properly handle data encrypted with a block cipher, which allows remote attackers to cause a denial of service (heap memory corruption and application crash) via a crafted record, as demonstrated by a crafted GenericBlockCipher structure.

Record
CVE-2012-1573
Updated
2026-11-02
OSVDEBIAN-CVE-2012-1573 No score

gnutls_cipher.c in libgnutls in GnuTLS before 2.12.17 and 3.x before 3.0.15 does not properly handle data encrypted with a block cipher, which allows remote attackers to cause a denial of service (heap memory corruption and application crash) via a crafted record, as demonstrated by a crafted GenericBlockCipher structure.

Record
DEBIAN-CVE-2012-1573
Updated
2026-11-02
OSVopenSUSE-SU-2024:10105-1 No score

gnutls-3.4.15-1.1 on GA media

These are all security issues fixed in the gnutls-3.4.15-1.1 package on the GA media of openSUSE Tumbleweed.

Record
openSUSE-SU-2024:10105-1
Updated
2026-11-02

Affected products

Affected packages

Affected packages
PackageAffectedFixed
gnutls28
Debian:12
 before 3.0.17-2
3.0.17-2
gnutls28
Debian:13
 before 3.0.17-2
3.0.17-2
gnutls28
Debian:14
 before 3.0.17-2
3.0.17-2
gnutls26
Debian:6.0
 before 2.8.6-1+squeeze2, plus listed versions
2.8.6-12.8.6-1+squeeze1
2.8.6-1+squeeze2
gnutls
Red Hat:enterprise_linux:5::client
 before 0:1.4.1-7.el5_8.2
0:1.4.1-7.el5_8.2
gnutls-debuginfo
Red Hat:enterprise_linux:5::client
 before 0:1.4.1-7.el5_8.2
0:1.4.1-7.el5_8.2
gnutls-utils
Red Hat:enterprise_linux:5::client
 before 0:1.4.1-7.el5_8.2
0:1.4.1-7.el5_8.2
gnutls
Red Hat:enterprise_linux:5::client_workstation
 before 0:1.4.1-7.el5_8.2
0:1.4.1-7.el5_8.2
gnutls-debuginfo
Red Hat:enterprise_linux:5::client_workstation
 before 0:1.4.1-7.el5_8.2
0:1.4.1-7.el5_8.2
gnutls-devel
Red Hat:enterprise_linux:5::client_workstation
 before 0:1.4.1-7.el5_8.2
0:1.4.1-7.el5_8.2
Show 27 moreShow less
Affected packages
PackageAffectedFixed
gnutls
Red Hat:enterprise_linux:5::server
 before 0:1.4.1-7.el5_8.2
0:1.4.1-7.el5_8.2
gnutls-debuginfo
Red Hat:enterprise_linux:5::server
 before 0:1.4.1-7.el5_8.2
0:1.4.1-7.el5_8.2
gnutls-devel
Red Hat:enterprise_linux:5::server
 before 0:1.4.1-7.el5_8.2
0:1.4.1-7.el5_8.2
gnutls-utils
Red Hat:enterprise_linux:5::server
 before 0:1.4.1-7.el5_8.2
0:1.4.1-7.el5_8.2
gnutls
Red Hat:enterprise_linux:6::client
 before 0:2.8.5-4.el6_2.2
0:2.8.5-4.el6_2.2
gnutls-debuginfo
Red Hat:enterprise_linux:6::client
 before 0:2.8.5-4.el6_2.2
0:2.8.5-4.el6_2.2
gnutls-utils
Red Hat:enterprise_linux:6::client
 before 0:2.8.5-4.el6_2.2
0:2.8.5-4.el6_2.2
gnutls-devel
Red Hat:enterprise_linux:6::client
 before 0:2.8.5-4.el6_2.2
0:2.8.5-4.el6_2.2
gnutls-guile
Red Hat:enterprise_linux:6::client
 before 0:2.8.5-4.el6_2.2
0:2.8.5-4.el6_2.2
gnutls
Red Hat:enterprise_linux:6::computenode
 before 0:2.8.5-4.el6_2.2
0:2.8.5-4.el6_2.2
gnutls-debuginfo
Red Hat:enterprise_linux:6::computenode
 before 0:2.8.5-4.el6_2.2
0:2.8.5-4.el6_2.2
gnutls-utils
Red Hat:enterprise_linux:6::computenode
 before 0:2.8.5-4.el6_2.2
0:2.8.5-4.el6_2.2
gnutls-devel
Red Hat:enterprise_linux:6::computenode
 before 0:2.8.5-4.el6_2.2
0:2.8.5-4.el6_2.2
gnutls-guile
Red Hat:enterprise_linux:6::computenode
 before 0:2.8.5-4.el6_2.2
0:2.8.5-4.el6_2.2
gnutls
Red Hat:enterprise_linux:6::server
 before 0:2.8.5-4.el6_2.2
0:2.8.5-4.el6_2.2
gnutls-debuginfo
Red Hat:enterprise_linux:6::server
 before 0:2.8.5-4.el6_2.2
0:2.8.5-4.el6_2.2
gnutls-devel
Red Hat:enterprise_linux:6::server
 before 0:2.8.5-4.el6_2.2
0:2.8.5-4.el6_2.2
gnutls-utils
Red Hat:enterprise_linux:6::server
 before 0:2.8.5-4.el6_2.2
0:2.8.5-4.el6_2.2
gnutls-guile
Red Hat:enterprise_linux:6::server
 before 0:2.8.5-4.el6_2.2
0:2.8.5-4.el6_2.2
gnutls
Red Hat:enterprise_linux:6::workstation
 before 0:2.8.5-4.el6_2.2
0:2.8.5-4.el6_2.2
gnutls-debuginfo
Red Hat:enterprise_linux:6::workstation
 before 0:2.8.5-4.el6_2.2
0:2.8.5-4.el6_2.2
gnutls-devel
Red Hat:enterprise_linux:6::workstation
 before 0:2.8.5-4.el6_2.2
0:2.8.5-4.el6_2.2
gnutls-utils
Red Hat:enterprise_linux:6::workstation
 before 0:2.8.5-4.el6_2.2
0:2.8.5-4.el6_2.2
gnutls-guile
Red Hat:enterprise_linux:6::workstation
 before 0:2.8.5-4.el6_2.2
0:2.8.5-4.el6_2.2
rhev-hypervisor6
Red Hat:enterprise_linux:6::hypervisor
 before 0:6.2-20120423.1.el6_2
0:6.2-20120423.1.el6_2
rhev-hypervisor6-tools
Red Hat:enterprise_linux:6::hypervisor
 before 0:6.2-20120423.1.el6_2
0:6.2-20120423.1.el6_2
gnutls
openSUSE:Tumbleweed
 before 3.4.15-1.1
3.4.15-1.1

History

History
RecordedChangedSources
aliasesEUVD
first indexedCVE List, GitHub Advisories, NVD, OSV

Dates are when Every CVE recorded each change. Upstream dates may differ.

In short

CVE-2012-1573 is a medium vulnerability (CVSS 5.0) in Gnu Gnutls, published March 25, 2012. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 4.15%, the 90th percentile. Fixed in gnutls28 3.0.17-2.

References

Show 58 moreShow less
Pages All vulnerabilities Browse Docs Sources Guide Get API key
MoveEnter Open