Every CVESearch/Get API key

CVE-2014-3465

The gnutls_x509_dn_oid_name function in lib/x509/common.c in GnuTLS 3.0 before 3.1.20 and 3.2.x...

5.0 MediumFix available

CVE-2014-3465 is a medium vulnerability (CVSS 5.0) in Gnu Gnutls, published June 2, 2014. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 4.14%, the 90th percentile. Fixed in gnutls28 3.2.10-1.

What does this mean?
Severity
5.0 MediumCVSS 2.0, NVD
Exploit chance
4.14%EPSS, 90th percentile
Exploitation
None knownNot on CISA’s or ENISA’s lists
Fixed in
3.2.10-1gnutls28 +28 more

Description

The gnutls_x509_dn_oid_name function in lib/x509/common.c in GnuTLS 3.0 before 3.1.20 and 3.2.x before 3.2.10 allows remote attackers to cause a denial of service (NULL pointer dereference) via a crafted X.509 certificate, related to a missing LDAP description for an OID when printing the DN.

Exploit likelihood

4.14%Up 2.7 points since Feb 4, 2022
90%50%10%1%

Affected products

Affected packages

Affected packages
PackageAffectedFixed
gnutls28
Debian:12
before 3.2.10-1
3.2.10-1
gnutls28
Debian:13
before 3.2.10-1
3.2.10-1
gnutls28
Debian:14
before 3.2.10-1
3.2.10-1
gnutls
Mageia:3
From an advisory covering 2 CVEs
before 3.1.16-1.3.mga3
3.1.16-1.3.mga3
gnutls
Mageia:4
From an advisory covering 2 CVEs
before 3.2.7-1.3.mga4
3.2.7-1.3.mga4
gnutls
Red Hat:enterprise_linux:7::client
From an advisory covering 2 CVEs
before 0:3.1.18-9.el7_0
0:3.1.18-9.el7_0
gnutls-dane
Red Hat:enterprise_linux:7::client
From an advisory covering 2 CVEs
before 0:3.1.18-9.el7_0
0:3.1.18-9.el7_0
gnutls-debuginfo
Red Hat:enterprise_linux:7::client
From an advisory covering 2 CVEs
before 0:3.1.18-9.el7_0
0:3.1.18-9.el7_0
gnutls-utils
Red Hat:enterprise_linux:7::client
From an advisory covering 2 CVEs
before 0:3.1.18-9.el7_0
0:3.1.18-9.el7_0
gnutls-c++
Red Hat:enterprise_linux:7::client
From an advisory covering 2 CVEs
before 0:3.1.18-9.el7_0
0:3.1.18-9.el7_0
Show 19 moreShow less
Affected packages
PackageAffectedFixed
gnutls-devel
Red Hat:enterprise_linux:7::client
From an advisory covering 2 CVEs
before 0:3.1.18-9.el7_0
0:3.1.18-9.el7_0
gnutls
Red Hat:enterprise_linux:7::computenode
From an advisory covering 2 CVEs
before 0:3.1.18-9.el7_0
0:3.1.18-9.el7_0
gnutls-dane
Red Hat:enterprise_linux:7::computenode
From an advisory covering 2 CVEs
before 0:3.1.18-9.el7_0
0:3.1.18-9.el7_0
gnutls-debuginfo
Red Hat:enterprise_linux:7::computenode
From an advisory covering 2 CVEs
before 0:3.1.18-9.el7_0
0:3.1.18-9.el7_0
gnutls-utils
Red Hat:enterprise_linux:7::computenode
From an advisory covering 2 CVEs
before 0:3.1.18-9.el7_0
0:3.1.18-9.el7_0
gnutls-c++
Red Hat:enterprise_linux:7::computenode
From an advisory covering 2 CVEs
before 0:3.1.18-9.el7_0
0:3.1.18-9.el7_0
gnutls-devel
Red Hat:enterprise_linux:7::computenode
From an advisory covering 2 CVEs
before 0:3.1.18-9.el7_0
0:3.1.18-9.el7_0
gnutls
Red Hat:enterprise_linux:7::server
From an advisory covering 2 CVEs
before 0:3.1.18-9.el7_0
0:3.1.18-9.el7_0
gnutls-c++
Red Hat:enterprise_linux:7::server
From an advisory covering 2 CVEs
before 0:3.1.18-9.el7_0
0:3.1.18-9.el7_0
gnutls-dane
Red Hat:enterprise_linux:7::server
From an advisory covering 2 CVEs
before 0:3.1.18-9.el7_0
0:3.1.18-9.el7_0
gnutls-debuginfo
Red Hat:enterprise_linux:7::server
From an advisory covering 2 CVEs
before 0:3.1.18-9.el7_0
0:3.1.18-9.el7_0
gnutls-devel
Red Hat:enterprise_linux:7::server
From an advisory covering 2 CVEs
before 0:3.1.18-9.el7_0
0:3.1.18-9.el7_0
gnutls-utils
Red Hat:enterprise_linux:7::server
From an advisory covering 2 CVEs
before 0:3.1.18-9.el7_0
0:3.1.18-9.el7_0
gnutls
Red Hat:enterprise_linux:7::workstation
From an advisory covering 2 CVEs
before 0:3.1.18-9.el7_0
0:3.1.18-9.el7_0
gnutls-c++
Red Hat:enterprise_linux:7::workstation
From an advisory covering 2 CVEs
before 0:3.1.18-9.el7_0
0:3.1.18-9.el7_0
gnutls-dane
Red Hat:enterprise_linux:7::workstation
From an advisory covering 2 CVEs
before 0:3.1.18-9.el7_0
0:3.1.18-9.el7_0
gnutls-debuginfo
Red Hat:enterprise_linux:7::workstation
From an advisory covering 2 CVEs
before 0:3.1.18-9.el7_0
0:3.1.18-9.el7_0
gnutls-devel
Red Hat:enterprise_linux:7::workstation
From an advisory covering 2 CVEs
before 0:3.1.18-9.el7_0
0:3.1.18-9.el7_0
gnutls-utils
Red Hat:enterprise_linux:7::workstation
From an advisory covering 2 CVEs
before 0:3.1.18-9.el7_0
0:3.1.18-9.el7_0

What each source reports

NVD Score used5.0

The gnutls_x509_dn_oid_name function in lib/x509/common.c in GnuTLS 3.0 before 3.1.20 and 3.2.x before 3.2.10 allows remote attackers to cause a denial of service (NULL pointer dereference) via a crafted X.509 certificate, related to a missing LDAP description for an OID when printing the DN.

Record
CVE-2014-3465
CVSS 2.0
5.0 MediumAV:N/AC:L/Au:N/C:N/I:N/A:P
Updated
2026-11-02
CVE ListNo score

The gnutls_x509_dn_oid_name function in lib/x509/common.c in GnuTLS 3.0 before 3.1.20 and 3.2.x before 3.2.10 allows remote attackers to cause a denial of service (NULL pointer dereference) via a crafted X.509 certificate, related to a missing LDAP description for an OID when printing the DN.

Record
CVE-2014-3465
Updated
2026-11-02
EUVDEUVD-2014-3477No score

The gnutls_x509_dn_oid_name function in lib/x509/common.c in GnuTLS 3.0 before 3.1.20 and 3.2.x before 3.2.10 allows remote attackers to cause a denial of service (NULL pointer dereference) via a crafted X.509 certificate, related to a missing LDAP description for an OID when printing the DN.

Record
EUVD-2014-3477
Updated
2026-11-03
GitHub AdvisoriesGHSA-g8hv-44v8-257wNo score

The gnutls_x509_dn_oid_name function in lib/x509/common.c in GnuTLS 3.0 before 3.1.20 and 3.2.x...

The gnutls_x509_dn_oid_name function in lib/x509/common.c in GnuTLS 3.0 before 3.1.20 and 3.2.x before 3.2.10 allows remote attackers to cause a denial of service (NULL pointer dereference) via a crafted X.509 certificate, related to a missing LDAP description for an OID when printing the DN.

Record
GHSA-g8hv-44v8-257w
Updated
2026-11-02
OSVNo score

The gnutls_x509_dn_oid_name function in lib/x509/common.c in GnuTLS 3.0 before 3.1.20 and 3.2.x before 3.2.10 allows remote attackers to cause a denial of service (NULL pointer dereference) via a crafted X.509 certificate, related to a missing LDAP description for an OID when printing the DN.

Record
CVE-2014-3465
Updated
2026-11-02
OSVDEBIAN-CVE-2014-3465No score

The gnutls_x509_dn_oid_name function in lib/x509/common.c in GnuTLS 3.0 before 3.1.20 and 3.2.x before 3.2.10 allows remote attackers to cause a denial of service (NULL pointer dereference) via a crafted X.509 certificate, related to a missing LDAP description for an OID when printing the DN.

Record
DEBIAN-CVE-2014-3465
Updated
2026-11-02
OSVMGASA-2014-0248No score

Updated gnutls packages fix CVE-2104-3465-6

Updated gnutls packages fix security vulnerabilities:

A NULL pointer dereference flaw was discovered in GnuTLS's gnutls_x509_dn_oid_name(). The function, when called with the GNUTLS_X509_DN_OID_RETURN_OID flag, should not return NULL to its caller. However, it could previously return NULL when parsed X.509 certificates included specific OIDs (CVE-2014-3465).

A flaw was found in the way GnuTLS parsed session ids from Server Hello packets of the TLS/SSL handshake. A malicious server could use this flaw to send an excessively long session id value and trigger a buffer overflow in a connecting TLS/SSL client using GnuTLS, causing it to crash or, possibly, execute arbitrary code (CVE-2014-3466).

Record
MGASA-2014-0248
Updated
2026-11-02

History

History
RecordedChangedSources
affected, facts
aliasesEUVD
first indexedCVE List, GitHub Advisories, NVD, OSV

Dates are when Every CVE recorded each change. Upstream dates may differ.

References

Show 19 moreShow less
PagesAll vulnerabilitiesBrowseDocsSourcesGuideGet API key
MoveEnter Open