CVE-2009-5138

GnuTLS before 2.7.6, when the GNUTLS_VERIFY_ALLOW_X509_V1_CA_CRT flag is not enabled, treats...

5.8 Medium

GnuTLS before 2.7.6, when the GNUTLS_VERIFY_ALLOW_X509_V1_CA_CRT flag is not enabled, treats version 1 X.509 certificates as intermediate CAs, which allows remote attackers to bypass intended restrictions by leveraging a X.509 V1 certificate from a trusted CA to issue new certificates, a different vulnerability than CVE-2014-1959.

Exploit likelihood

1.80%Down 2.0 points since Feb 4, 2022

What each source reports

NVD Score used 5.8

Record: CVE-2009-5138
CVSS 2.0: 5.8 MediumAV:N/AC:M/Au:N/C:P/I:P/A:N
Weakness: CWE-264
Updated: 2026-11-02

CVE List No score

Record: CVE-2009-5138
Updated: 2026-11-02

EUVDEUVD-2009-5093 No score

Record: EUVD-2009-5093
Updated: 2026-11-03

GitHub AdvisoriesGHSA-754r-c6vv-mv5g No score

GnuTLS before 2.7.6, when the GNUTLS_VERIFY_ALLOW_X509_V1_CA_CRT flag is not enabled, treats...

Record: GHSA-754r-c6vv-mv5g
Updated: 2026-11-02

OSVSUSE-SU-2015:0675-1 No score

Security update for gnutls

GnuTLS has been patched to ensure proper parsing of session ids during the TLS/SSL handshake. Additionally, three issues inherited from libtasn1 have been fixed.

Further information is available at http://www.gnutls.org/security.html#GNUTLS-SA-2014-3 http://www.gnutls.org/security.html#GNUTLS-SA-2014-3

These security issues have been fixed:

* Possible memory corruption during connect (CVE-2014-3466)
* Multiple boundary check issues could allow DoS (CVE-2014-3467)
* asn1_get_bit_der() can return negative bit length (CVE-2014-3468)
* Possible DoS by NULL pointer dereference (CVE-2014-3469)

Security Issue references:

* CVE-2014-3466
  <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-3466>

Record: SUSE-SU-2015:0675-1
Updated: 2026-11-02

Affected products

gnu gnutls

Affected packages

Affected packages
Package	Affected	Fixed
`gnutls` Red Hat:enterprise_linux:5::client From an advisory covering 2 CVEs	before 0:1.4.1-14.el5_10	0:1.4.1-14.el5_10
`gnutls-debuginfo` Red Hat:enterprise_linux:5::client From an advisory covering 2 CVEs	before 0:1.4.1-14.el5_10	0:1.4.1-14.el5_10
`gnutls-utils` Red Hat:enterprise_linux:5::client From an advisory covering 2 CVEs	before 0:1.4.1-14.el5_10	0:1.4.1-14.el5_10
`gnutls` Red Hat:enterprise_linux:5::client_workstation From an advisory covering 2 CVEs	before 0:1.4.1-14.el5_10	0:1.4.1-14.el5_10
`gnutls-debuginfo` Red Hat:enterprise_linux:5::client_workstation From an advisory covering 2 CVEs	before 0:1.4.1-14.el5_10	0:1.4.1-14.el5_10
`gnutls-devel` Red Hat:enterprise_linux:5::client_workstation From an advisory covering 2 CVEs	before 0:1.4.1-14.el5_10	0:1.4.1-14.el5_10
`gnutls` Red Hat:enterprise_linux:5::server From an advisory covering 2 CVEs	before 0:1.4.1-14.el5_10	0:1.4.1-14.el5_10
`gnutls-debuginfo` Red Hat:enterprise_linux:5::server From an advisory covering 2 CVEs	before 0:1.4.1-14.el5_10	0:1.4.1-14.el5_10
`gnutls-devel` Red Hat:enterprise_linux:5::server From an advisory covering 2 CVEs	before 0:1.4.1-14.el5_10	0:1.4.1-14.el5_10
`gnutls-utils` Red Hat:enterprise_linux:5::server From an advisory covering 2 CVEs	before 0:1.4.1-14.el5_10	0:1.4.1-14.el5_10

History

History
Recorded	Changed	Sources
Nov 6, 2026	affected, facts
Nov 3, 2026	aliases	EUVD
Nov 2, 2026	first indexed	CVE List, GitHub Advisories, NVD, OSV

Dates are when Every CVE recorded each change. Upstream dates may differ.

In short

CVE-2009-5138 is a medium vulnerability (CVSS 5.8) in Gnu Gnutls, published March 6, 2014. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 1.80%, the 78th percentile. No source names a fixed version.

References

Show 35 moreShow less