CVE-2015-3308
Double free vulnerability in lib/x509/x509_ext.c in GnuTLS before 3.3.14 allows remote attackers...
CVE-2015-3308 is a high vulnerability (CVSS 7.5) in Gnu Gnutls, published September 2, 2015. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 3.92%, the 90th percentile. Fixed in gnutls28 3.3.8-7.
- Severity
- 7.5 HighCVSS 2.0, NVD
- Exploit chance
- 3.92%EPSS, 90th percentile
- Exploitation
- None knownNot on CISA’s or ENISA’s lists
- Fixed in
3.3.8-7gnutls28 +2 more
Description
Double free vulnerability in lib/x509/x509_ext.c in GnuTLS before 3.3.14 allows remote attackers to cause a denial of service or possibly have unspecified other impact via a crafted CRL distribution point.
Exploit likelihood
Affected products
Affected packages
What each source reports
NVD Score used
Double free vulnerability in lib/x509/x509_ext.c in GnuTLS before 3.3.14 allows remote attackers to cause a denial of service or possibly have unspecified other impact via a crafted CRL distribution point.
- Record
CVE-2015-3308- CVSS 2.0
- 7.5 High
AV:N/AC:L/Au:N/C:P/I:P/A:P - Updated
- 2026-11-02
CVE ListNo score
Double free vulnerability in lib/x509/x509_ext.c in GnuTLS before 3.3.14 allows remote attackers to cause a denial of service or possibly have unspecified other impact via a crafted CRL distribution point.
- Record
CVE-2015-3308- Updated
- 2026-11-02
EUVDEUVD-2015-3354No score
Double free vulnerability in lib/x509/x509_ext.c in GnuTLS before 3.3.14 allows remote attackers to cause a denial of service or possibly have unspecified other impact via a crafted CRL distribution point.
- Record
EUVD-2015-3354- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-f5vv-qq78-r728No score
Double free vulnerability in lib/x509/x509_ext.c in GnuTLS before 3.3.14 allows remote attackers...
Double free vulnerability in lib/x509/x509_ext.c in GnuTLS before 3.3.14 allows remote attackers to cause a denial of service or possibly have unspecified other impact via a crafted CRL distribution point.
- Record
GHSA-f5vv-qq78-r728- Updated
- 2026-11-02
OSVNo score
Double free vulnerability in lib/x509/x509_ext.c in GnuTLS before 3.3.14 allows remote attackers to cause a denial of service or possibly have unspecified other impact via a crafted CRL distribution point.
- Record
CVE-2015-3308- Updated
- 2026-11-02
OSVDEBIAN-CVE-2015-3308No score
Double free vulnerability in lib/x509/x509_ext.c in GnuTLS before 3.3.14 allows remote attackers to cause a denial of service or possibly have unspecified other impact via a crafted CRL distribution point.
- Record
DEBIAN-CVE-2015-3308- Updated
- 2026-11-02
History
| Recorded | Changed | Sources |
|---|---|---|
| facts | ||
| aliases | EUVD | |
| first indexed | CVE List, GitHub Advisories, NVD, OSV |
Dates are when Every CVE recorded each change. Upstream dates may differ.
References
lists.fedoraproject.org/pipermail/package-announce/2015-April/155101.html
openwall.com/lists/oss-security/2015/04/16/6
ubuntu.com/usn/USN-2727-1
gnutls.org/security.html
securityfocus.com/bid/74188
gitlab.com/gnutls/gnutls/commit/d6972be33264ecc49a86cd0958209cd7363af1e9
Show 7 moreShow less
security.gentoo.org/glsa/201506-03
securitytracker.com/id/1033774
nvd.nist.gov/vuln/detail/CVE-2015-3308
github.com/advisories/GHSA-f5vv-qq78-r728
security-tracker.debian.org/tracker/CVE-2015-3308