{"id":"CVE-2014-0092","aliases":["DEBIAN-CVE-2014-0092","DSA-2869-1","EUVD-2014-0177","GHSA-c9fv-cm23-r7xv","MGASA-2014-0117","RHSA-2014:0246","RHSA-2014:0247","RHSA-2014:0288","RHSA-2014:0339","SUSE-SU-2015:0675-1","UBUNTU-CVE-2014-0092","openSUSE-SU-2024:10105-1"],"status":"published","title":"lib/x509/verify.c in GnuTLS before 3.1.22 and 3.2.x before 3.2.12 does not properly handle...","description":"lib/x509/verify.c in GnuTLS before 3.1.22 and 3.2.x before 3.2.12 does not properly handle unspecified errors when verifying X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers via a crafted certificate.","severity":{"version":"2.0","score":5.8,"vector":"AV:N/AC:M/Au:N/C:P/I:P/A:N","level":"medium","assessor":"primary","from":"nvd"},"epss":{"day":"2026-11-09","score":0.2986,"percentile":0.98215,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":true},"cwes":["CWE-310"],"published":"2014-03-03T00:00:00Z","modified":"2026-10-23T15:47:24Z","fixes":[{"ecosystem":"Debian:12","package":"gnutls28","fixed_in":["3.2.11-2"],"sources":["osv"]},{"ecosystem":"Debian:13","package":"gnutls28","fixed_in":["3.2.11-2"],"sources":["osv"]},{"ecosystem":"Debian:14","package":"gnutls28","fixed_in":["3.2.11-2"],"sources":["osv"]},{"ecosystem":"Debian:6.0","package":"gnutls26","fixed_in":["2.8.6-1+squeeze3"],"sources":["osv"]},{"ecosystem":"Debian:7","package":"gnutls26","fixed_in":["2.12.20-8+deb7u1"],"sources":["osv"]},{"ecosystem":"Mageia:3","package":"gnutls","fixed_in":["3.1.16-1.2.mga3"],"sources":["osv"]},{"ecosystem":"Mageia:4","package":"gnutls","fixed_in":["3.2.7-1.2.mga4"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:6::client","package":"gnutls","fixed_in":["0:2.8.5-13.el6_5"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:6::client","package":"gnutls-debuginfo","fixed_in":["0:2.8.5-13.el6_5"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:6::client","package":"gnutls-utils","fixed_in":["0:2.8.5-13.el6_5"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:6::client","package":"gnutls-devel","fixed_in":["0:2.8.5-13.el6_5"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:6::client","package":"gnutls-guile","fixed_in":["0:2.8.5-13.el6_5"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:6::computenode","package":"gnutls","fixed_in":["0:2.8.5-13.el6_5"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:6::computenode","package":"gnutls-debuginfo","fixed_in":["0:2.8.5-13.el6_5"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:6::computenode","package":"gnutls-utils","fixed_in":["0:2.8.5-13.el6_5"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:6::computenode","package":"gnutls-devel","fixed_in":["0:2.8.5-13.el6_5"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:6::computenode","package":"gnutls-guile","fixed_in":["0:2.8.5-13.el6_5"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:6::server","package":"gnutls","fixed_in":["0:2.8.5-13.el6_5"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:6::server","package":"gnutls-debuginfo","fixed_in":["0:2.8.5-13.el6_5"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:6::server","package":"gnutls-devel","fixed_in":["0:2.8.5-13.el6_5"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:6::server","package":"gnutls-utils","fixed_in":["0:2.8.5-13.el6_5"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:6::server","package":"gnutls-guile","fixed_in":["0:2.8.5-13.el6_5"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:6::workstation","package":"gnutls","fixed_in":["0:2.8.5-13.el6_5"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:6::workstation","package":"gnutls-debuginfo","fixed_in":["0:2.8.5-13.el6_5"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:6::workstation","package":"gnutls-devel","fixed_in":["0:2.8.5-13.el6_5"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:6::workstation","package":"gnutls-utils","fixed_in":["0:2.8.5-13.el6_5"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:6::workstation","package":"gnutls-guile","fixed_in":["0:2.8.5-13.el6_5"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_els:4::as","package":"gnutls","fixed_in":["0:1.0.20-5.el4"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_els:4::as","package":"gnutls-debuginfo","fixed_in":["0:1.0.20-5.el4"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_els:4::as","package":"gnutls-devel","fixed_in":["0:1.0.20-5.el4"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_els:4::es","package":"gnutls","fixed_in":["0:1.0.20-5.el4"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_els:4::es","package":"gnutls-debuginfo","fixed_in":["0:1.0.20-5.el4"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_els:4::es","package":"gnutls-devel","fixed_in":["0:1.0.20-5.el4"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_mission_critical:5.3","package":"gnutls","fixed_in":["0:1.4.1-3.el5_3.6"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_mission_critical:5.3","package":"gnutls-debuginfo","fixed_in":["0:1.4.1-3.el5_3.6"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_mission_critical:5.3","package":"gnutls-devel","fixed_in":["0:1.4.1-3.el5_3.6"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_mission_critical:5.3","package":"gnutls-utils","fixed_in":["0:1.4.1-3.el5_3.6"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_mission_critical:5.6","package":"gnutls","fixed_in":["0:1.4.1-7.el5_6.1"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_mission_critical:5.6","package":"gnutls-debuginfo","fixed_in":["0:1.4.1-7.el5_6.1"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_mission_critical:5.6","package":"gnutls-devel","fixed_in":["0:1.4.1-7.el5_6.1"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_mission_critical:5.6","package":"gnutls-utils","fixed_in":["0:1.4.1-7.el5_6.1"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_eus:5.9","package":"gnutls","fixed_in":["0:1.4.1-10.el5_9.3"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_eus:5.9","package":"gnutls-debuginfo","fixed_in":["0:1.4.1-10.el5_9.3"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_eus:5.9","package":"gnutls-devel","fixed_in":["0:1.4.1-10.el5_9.3"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_eus:5.9","package":"gnutls-utils","fixed_in":["0:1.4.1-10.el5_9.3"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_eus:6.3::computenode","package":"gnutls","fixed_in":["0:2.8.5-7.el6_3.2"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_eus:6.3::computenode","package":"gnutls-debuginfo","fixed_in":["0:2.8.5-7.el6_3.2"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_eus:6.3::computenode","package":"gnutls-utils","fixed_in":["0:2.8.5-7.el6_3.2"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_eus:6.4::computenode","package":"gnutls","fixed_in":["0:2.8.5-10.el6_4.3"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_eus:6.4::computenode","package":"gnutls-debuginfo","fixed_in":["0:2.8.5-10.el6_4.3"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_eus:6.4::computenode","package":"gnutls-utils","fixed_in":["0:2.8.5-10.el6_4.3"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_eus:6.3::computenode","package":"gnutls-devel","fixed_in":["0:2.8.5-7.el6_3.2"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_eus:6.3::computenode","package":"gnutls-guile","fixed_in":["0:2.8.5-7.el6_3.2"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_eus:6.4::computenode","package":"gnutls-devel","fixed_in":["0:2.8.5-10.el6_4.3"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_eus:6.4::computenode","package":"gnutls-guile","fixed_in":["0:2.8.5-10.el6_4.3"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_mission_critical:6.2::server","package":"gnutls","fixed_in":["0:2.8.5-4.el6_2.3"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_mission_critical:6.2::server","package":"gnutls-debuginfo","fixed_in":["0:2.8.5-4.el6_2.3"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_mission_critical:6.2::server","package":"gnutls-devel","fixed_in":["0:2.8.5-4.el6_2.3"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_mission_critical:6.2::server","package":"gnutls-utils","fixed_in":["0:2.8.5-4.el6_2.3"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_eus:6.3::server","package":"gnutls","fixed_in":["0:2.8.5-7.el6_3.2"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_eus:6.3::server","package":"gnutls-debuginfo","fixed_in":["0:2.8.5-7.el6_3.2"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_eus:6.3::server","package":"gnutls-devel","fixed_in":["0:2.8.5-7.el6_3.2"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_eus:6.3::server","package":"gnutls-utils","fixed_in":["0:2.8.5-7.el6_3.2"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_eus:6.4::server","package":"gnutls","fixed_in":["0:2.8.5-10.el6_4.3"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_eus:6.4::server","package":"gnutls-debuginfo","fixed_in":["0:2.8.5-10.el6_4.3"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_eus:6.4::server","package":"gnutls-devel","fixed_in":["0:2.8.5-10.el6_4.3"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_eus:6.4::server","package":"gnutls-utils","fixed_in":["0:2.8.5-10.el6_4.3"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_mission_critical:6.2::server","package":"gnutls-guile","fixed_in":["0:2.8.5-4.el6_2.3"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_eus:6.3::server","package":"gnutls-guile","fixed_in":["0:2.8.5-7.el6_3.2"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_eus:6.4::server","package":"gnutls-guile","fixed_in":["0:2.8.5-10.el6_4.3"],"sources":["osv"]},{"ecosystem":"Ubuntu:14.04:LTS","package":"gnutls26","fixed_in":["2.12.23-12ubuntu2"],"sources":["osv"]}],"affected":[{"source":"osv","ecosystem":"Debian:12","package":"gnutls28","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.2.11-2"}]}]},{"source":"osv","ecosystem":"Debian:13","package":"gnutls28","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.2.11-2"}]}]},{"source":"osv","ecosystem":"Debian:14","package":"gnutls28","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.2.11-2"}]}]},{"source":"osv","ecosystem":"Debian:6.0","package":"gnutls26","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.8.6-1+squeeze3"}]}],"versions":["2.8.6-1","2.8.6-1+squeeze1","2.8.6-1+squeeze2"]},{"source":"osv","ecosystem":"Debian:7","package":"gnutls26","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.12.20-8+deb7u1"}]}],"versions":["2.12.20-6","2.12.20-7","2.12.20-8"]},{"source":"osv","ecosystem":"Mageia:3","package":"gnutls","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.1.16-1.2.mga3"}]}]},{"source":"osv","ecosystem":"Mageia:4","package":"gnutls","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.2.7-1.2.mga4"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::client","package":"gnutls","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.8.5-13.el6_5"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::client","package":"gnutls-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.8.5-13.el6_5"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::client","package":"gnutls-utils","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.8.5-13.el6_5"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::client","package":"gnutls-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.8.5-13.el6_5"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::client","package":"gnutls-guile","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.8.5-13.el6_5"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::computenode","package":"gnutls","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.8.5-13.el6_5"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::computenode","package":"gnutls-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.8.5-13.el6_5"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::computenode","package":"gnutls-utils","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.8.5-13.el6_5"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::computenode","package":"gnutls-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.8.5-13.el6_5"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::computenode","package":"gnutls-guile","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.8.5-13.el6_5"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::server","package":"gnutls","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.8.5-13.el6_5"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::server","package":"gnutls-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.8.5-13.el6_5"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::server","package":"gnutls-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.8.5-13.el6_5"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::server","package":"gnutls-utils","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.8.5-13.el6_5"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::server","package":"gnutls-guile","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.8.5-13.el6_5"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::workstation","package":"gnutls","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.8.5-13.el6_5"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::workstation","package":"gnutls-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.8.5-13.el6_5"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::workstation","package":"gnutls-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.8.5-13.el6_5"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::workstation","package":"gnutls-utils","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.8.5-13.el6_5"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::workstation","package":"gnutls-guile","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.8.5-13.el6_5"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:5::client","package":"gnutls","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.4.1-14.el5_10"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:5::client","package":"gnutls-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.4.1-14.el5_10"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:5::client","package":"gnutls-utils","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.4.1-14.el5_10"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:5::client_workstation","package":"gnutls","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.4.1-14.el5_10"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:5::client_workstation","package":"gnutls-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.4.1-14.el5_10"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:5::client_workstation","package":"gnutls-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.4.1-14.el5_10"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:5::server","package":"gnutls","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.4.1-14.el5_10"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:5::server","package":"gnutls-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.4.1-14.el5_10"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:5::server","package":"gnutls-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.4.1-14.el5_10"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:5::server","package":"gnutls-utils","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.4.1-14.el5_10"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:rhel_els:4::as","package":"gnutls","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.0.20-5.el4"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_els:4::as","package":"gnutls-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.0.20-5.el4"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_els:4::as","package":"gnutls-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.0.20-5.el4"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_els:4::es","package":"gnutls","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.0.20-5.el4"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_els:4::es","package":"gnutls-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.0.20-5.el4"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_els:4::es","package":"gnutls-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.0.20-5.el4"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_mission_critical:5.3","package":"gnutls","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.4.1-3.el5_3.6"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_mission_critical:5.3","package":"gnutls-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.4.1-3.el5_3.6"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_mission_critical:5.3","package":"gnutls-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.4.1-3.el5_3.6"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_mission_critical:5.3","package":"gnutls-utils","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.4.1-3.el5_3.6"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_mission_critical:5.6","package":"gnutls","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.4.1-7.el5_6.1"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_mission_critical:5.6","package":"gnutls-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.4.1-7.el5_6.1"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_mission_critical:5.6","package":"gnutls-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.4.1-7.el5_6.1"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_mission_critical:5.6","package":"gnutls-utils","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.4.1-7.el5_6.1"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_eus:5.9","package":"gnutls","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.4.1-10.el5_9.3"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_eus:5.9","package":"gnutls-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.4.1-10.el5_9.3"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_eus:5.9","package":"gnutls-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.4.1-10.el5_9.3"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_eus:5.9","package":"gnutls-utils","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.4.1-10.el5_9.3"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_eus:6.3::computenode","package":"gnutls","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.8.5-7.el6_3.2"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_eus:6.3::computenode","package":"gnutls-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.8.5-7.el6_3.2"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_eus:6.3::computenode","package":"gnutls-utils","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.8.5-7.el6_3.2"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_eus:6.4::computenode","package":"gnutls","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.8.5-10.el6_4.3"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_eus:6.4::computenode","package":"gnutls-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.8.5-10.el6_4.3"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_eus:6.4::computenode","package":"gnutls-utils","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.8.5-10.el6_4.3"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_eus:6.3::computenode","package":"gnutls-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.8.5-7.el6_3.2"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_eus:6.3::computenode","package":"gnutls-guile","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.8.5-7.el6_3.2"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_eus:6.4::computenode","package":"gnutls-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.8.5-10.el6_4.3"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_eus:6.4::computenode","package":"gnutls-guile","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.8.5-10.el6_4.3"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_mission_critical:6.2::server","package":"gnutls","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.8.5-4.el6_2.3"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_mission_critical:6.2::server","package":"gnutls-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.8.5-4.el6_2.3"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_mission_critical:6.2::server","package":"gnutls-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.8.5-4.el6_2.3"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_mission_critical:6.2::server","package":"gnutls-utils","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.8.5-4.el6_2.3"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_eus:6.3::server","package":"gnutls","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.8.5-7.el6_3.2"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_eus:6.3::server","package":"gnutls-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.8.5-7.el6_3.2"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_eus:6.3::server","package":"gnutls-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.8.5-7.el6_3.2"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_eus:6.3::server","package":"gnutls-utils","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.8.5-7.el6_3.2"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_eus:6.4::server","package":"gnutls","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.8.5-10.el6_4.3"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_eus:6.4::server","package":"gnutls-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.8.5-10.el6_4.3"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_eus:6.4::server","package":"gnutls-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.8.5-10.el6_4.3"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_eus:6.4::server","package":"gnutls-utils","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.8.5-10.el6_4.3"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_mission_critical:6.2::server","package":"gnutls-guile","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.8.5-4.el6_2.3"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_eus:6.3::server","package":"gnutls-guile","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.8.5-7.el6_3.2"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_eus:6.4::server","package":"gnutls-guile","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.8.5-10.el6_4.3"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::hypervisor","package":"rhev-hypervisor6","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:6.5-20140324.0.el6ev"}]}],"bundled":3},{"source":"osv","ecosystem":"Ubuntu:14.04:LTS","package":"gnutls26","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.12.23-12ubuntu2"}]}],"versions":["2.12.23-1ubuntu4","2.12.23-1ubuntu5","2.12.23-12ubuntu1"]},{"source":"osv","ecosystem":"openSUSE:Tumbleweed","package":"gnutls","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.4.15-1.1"}]}],"bundled":10}],"products":[{"vendor":"gnu","product":"gnutls"}],"references":[{"url":"http://secunia.com/advisories/57321","tags":["third-party-advisory","x_refsource_SECUNIA","x_transferred","advisory"]},{"url":"http://secunia.com/advisories/57260","tags":["third-party-advisory","x_refsource_SECUNIA","x_transferred","advisory"]},{"url":"http://rhn.redhat.com/errata/RHSA-2014-0288.html","tags":["vendor-advisory","x_refsource_REDHAT","x_transferred","advisory"]},{"url":"http://gnutls.org/security.html#GNUTLS-SA-2014-2","tags":["x_refsource_CONFIRM","x_transferred","web","report"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2014-03/msg00020.html","tags":["vendor-advisory","x_refsource_SUSE","x_transferred","web"]},{"url":"http://secunia.com/advisories/57274","tags":["third-party-advisory","x_refsource_SECUNIA","x_transferred","advisory"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2014-03/msg00000.html","tags":["vendor-advisory","x_refsource_SUSE","x_transferred","web"]},{"url":"http://rhn.redhat.com/errata/RHSA-2014-0247.html","tags":["vendor-advisory","x_refsource_REDHAT","x_transferred","advisory"]},{"url":"http://www.securityfocus.com/bid/65919","tags":["vdb-entry","x_refsource_BID","x_transferred","web"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2014-03/msg00001.html","tags":["vendor-advisory","x_refsource_SUSE","x_transferred","web"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2014-03/msg00003.html","tags":["vendor-advisory","x_refsource_SUSE","x_transferred","web"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2014-03/msg00005.html","tags":["vendor-advisory","x_refsource_SUSE","x_transferred","web"]},{"url":"http://secunia.com/advisories/57254","tags":["third-party-advisory","x_refsource_SECUNIA","x_transferred","advisory"]},{"url":"http://rhn.redhat.com/errata/RHSA-2014-0339.html","tags":["vendor-advisory","x_refsource_REDHAT","x_transferred","advisory"]},{"url":"http://secunia.com/advisories/56933","tags":["third-party-advisory","x_refsource_SECUNIA","x_transferred","Vendor Advisory","advisory"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2014-03/msg00004.html","tags":["vendor-advisory","x_refsource_SUSE","x_transferred","web"]},{"url":"http://rhn.redhat.com/errata/RHSA-2014-0246.html","tags":["vendor-advisory","x_refsource_REDHAT","x_transferred","advisory"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2014-03/msg00002.html","tags":["vendor-advisory","x_refsource_SUSE","x_transferred","web"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1069865","tags":["x_refsource_CONFIRM","x_transferred","report"]},{"url":"http://www.ubuntu.com/usn/USN-2127-1","tags":["vendor-advisory","x_refsource_UBUNTU","x_transferred","advisory"]},{"url":"http://secunia.com/advisories/57204","tags":["third-party-advisory","x_refsource_SECUNIA","x_transferred","Vendor Advisory","advisory"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2014-03/msg00009.html","tags":["vendor-advisory","x_refsource_SUSE","x_transferred","web"]},{"url":"http://secunia.com/advisories/57103","tags":["third-party-advisory","x_refsource_SECUNIA","x_transferred","advisory"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2014-03/msg00007.html","tags":["vendor-advisory","x_refsource_SUSE","x_transferred","web"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2014-03/msg00006.html","tags":["vendor-advisory","x_refsource_SUSE","x_transferred","web"]},{"url":"http://www.debian.org/security/2014/dsa-2869","tags":["vendor-advisory","x_refsource_DEBIAN","x_transferred","advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2014-0092","tags":["advisory"]},{"url":"https://github.com/advisories/GHSA-c9fv-cm23-r7xv"},{"url":"https://security-tracker.debian.org/tracker/CVE-2014-0092","tags":["advisory"]},{"url":"https://advisories.mageia.org/MGASA-2014-0117.html","tags":["advisory"]},{"url":"https://bugs.mageia.org/show_bug.cgi?id=12922","tags":["report"]},{"url":"https://rhn.redhat.com/errata/RHSA-2014-0246.html","tags":["web"]},{"url":"https://access.redhat.com/errata/RHSA-2014:0246","tags":["advisory"]},{"url":"https://access.redhat.com/security/updates/classification/#important","tags":["article"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2014/rhsa-2014_0246.json","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2014-0092","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2014-0092","tags":["advisory","report"]},{"url":"https://access.redhat.com/errata/RHSA-2014:0247","tags":["advisory"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1069301","tags":["report"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2014/rhsa-2014_0247.json","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2009-5138","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2009-5138","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2009-5138","tags":["advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2014:0288","tags":["advisory"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2014/rhsa-2014_0288.json","tags":["advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2014:0339","tags":["advisory"]},{"url":"https://access.redhat.com/site/documentation/en-US/Red_Hat_Enterprise_Linux/6/html/Hypervisor_Deployment_Guide/chap-Deployment_Guide-Upgrading_Red_Hat_Enterprise_Virtualization_Hypervisors.html","tags":["article"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=921970","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1062577","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1075950","tags":["report"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2014/rhsa-2014_0339.json","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2013-1860","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2013-1860","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2013-1860","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2014-0055","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2014-0055","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2014-0055","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2015/suse-su-20150675-1/","tags":["advisory"]},{"url":"https://bugzilla.suse.com/821818","tags":["report"]},{"url":"https://bugzilla.suse.com/835760","tags":["report"]},{"url":"https://bugzilla.suse.com/865804","tags":["report"]},{"url":"https://bugzilla.suse.com/865993","tags":["report"]},{"url":"https://bugzilla.suse.com/880730","tags":["report"]},{"url":"https://bugzilla.suse.com/880910","tags":["report"]},{"url":"https://bugzilla.suse.com/919938","tags":["report"]},{"url":"https://bugzilla.suse.com/921684","tags":["report"]},{"url":"https://www.suse.com/security/cve/CVE-2009-5138","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2013-2116","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-0092","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-3466","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-8155","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-0282","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-0294","tags":["web"]},{"url":"https://ubuntu.com/security/CVE-2014-0092","tags":["report"]},{"url":"https://ubuntu.com/security/notices/USN-2127-1","tags":["advisory"]},{"url":"","tags":["advisory"]},{"url":"https://www.suse.com/security/cve/CVE-2008-4989","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2011-4128","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2012-0390","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2012-1569","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2012-1573","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-1959","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-8564","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-6251","tags":["web"]}],"sources":{"cve":[{"id":"CVE-2014-0092","description":"lib/x509/verify.c in GnuTLS before 3.1.22 and 3.2.x before 3.2.12 does not properly handle unspecified errors when verifying X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers via a crafted certificate.","status":"published","published":"2014-03-06T18:00:00Z","modified":"2024-08-06T09:05:38.662Z","updated_at":"2026-11-02T14:33:47.330011Z"}],"euvd":[{"id":"EUVD-2014-0177","description":"lib/x509/verify.c in GnuTLS before 3.1.22 and 3.2.x before 3.2.12 does not properly handle unspecified errors when verifying X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers via a crafted certificate.","status":"published","published":"2014-03-06T18:00:00Z","modified":"2024-08-06T09:05:38Z","updated_at":"2026-11-03T01:57:22.468358Z"}],"ghsa":[{"id":"GHSA-c9fv-cm23-r7xv","title":"lib/x509/verify.c in GnuTLS before 3.1.22 and 3.2.x before 3.2.12 does not properly handle...","description":"lib/x509/verify.c in GnuTLS before 3.1.22 and 3.2.x before 3.2.12 does not properly handle unspecified errors when verifying X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers via a crafted certificate.","status":"published","published":"2022-05-17T03:46:13Z","modified":"2023-01-27T05:08:13Z","updated_at":"2026-11-02T14:43:16.143639Z"}],"nvd":[{"id":"CVE-2014-0092","description":"lib/x509/verify.c in GnuTLS before 3.1.22 and 3.2.x before 3.2.12 does not properly handle unspecified errors when verifying X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers via a crafted certificate.","status":"published","published":"2014-03-07T00:10:53.573Z","modified":"2026-06-17T00:02:14.693Z","cvss":[{"version":"2.0","score":5.8,"vector":"AV:N/AC:M/Au:N/C:P/I:P/A:N","level":"medium","assessor":"primary"}],"cwes":["CWE-310"],"updated_at":"2026-11-02T14:02:53.710973Z"}],"osv":[{"id":"CVE-2014-0092","description":"lib/x509/verify.c in GnuTLS before 3.1.22 and 3.2.x before 3.2.12 does not properly handle unspecified errors when verifying X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers via a crafted certificate.","status":"published","published":"2014-03-07T00:10:53Z","modified":"2026-04-16T06:18:39.812022757Z","updated_at":"2026-11-02T15:43:59.361892Z"},{"id":"DEBIAN-CVE-2014-0092","description":"lib/x509/verify.c in GnuTLS before 3.1.22 and 3.2.x before 3.2.12 does not properly handle unspecified errors when verifying X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers via a crafted certificate.","status":"published","published":"2014-03-07T00:10:53.573Z","modified":"2026-10-23T15:47:24.529944715Z","updated_at":"2026-11-02T15:45:25.819707Z"},{"id":"DSA-2869-1","title":"gnutls26 - incorrect certificate verification","status":"published","published":"2014-03-03T00:00:00Z","modified":"2026-03-09T01:23:10.829089Z","updated_at":"2026-11-02T15:46:15.843838Z"},{"id":"MGASA-2014-0117","title":"Updated gnutls packages fix security vulnerability","description":"It was discovered that GnuTLS did not correctly handle certain errors that\ncould occur during the verification of an X.509 certificate, causing it to\nincorrectly report a successful verification. An attacker could use this\nflaw to create a specially crafted certificate that could be accepted by\nGnuTLS as valid for a site chosen by the attacker (CVE-2014-0092).\n","status":"published","published":"2014-03-03T20:07:34Z","modified":"2026-04-16T06:25:25.257919037Z","updated_at":"2026-11-02T15:49:39.121227Z"},{"id":"openSUSE-SU-2024:10105-1","title":"gnutls-3.4.15-1.1 on GA media","description":"These are all security issues fixed in the gnutls-3.4.15-1.1 package on the GA media of openSUSE Tumbleweed.","status":"published","published":"2024-06-15T00:00:00Z","modified":"2025-05-07T18:08:28.673202Z","updated_at":"2026-11-02T16:58:33.135986Z"},{"id":"RHSA-2014:0246","title":"Red Hat Security Advisory: gnutls security update","status":"published","published":"2024-09-13T08:52:14Z","modified":"2026-06-28T10:09:41Z","updated_at":"2026-11-02T15:53:01.993625Z"},{"id":"RHSA-2014:0247","title":"Red Hat Security Advisory: gnutls security update","status":"published","published":"2024-09-15T21:26:54Z","modified":"2026-06-28T10:09:41Z","updated_at":"2026-11-02T15:53:01.993625Z"},{"id":"RHSA-2014:0288","title":"Red Hat Security Advisory: gnutls security update","status":"published","published":"2024-09-13T08:52:26Z","modified":"2026-06-28T10:09:43Z","updated_at":"2026-11-02T15:53:01.993625Z"},{"id":"RHSA-2014:0339","title":"Red Hat Security Advisory: rhev-hypervisor6 security update","status":"published","published":"2024-09-13T08:51:49Z","modified":"2026-06-28T10:09:46Z","updated_at":"2026-11-02T15:53:01.993625Z"},{"id":"SUSE-SU-2015:0675-1","title":"Security update for gnutls","description":"\nGnuTLS has been patched to ensure proper parsing of session ids during the \nTLS/SSL handshake. Additionally, three issues inherited from libtasn1 have \nbeen fixed.\n\nFurther information is available at \nhttp://www.gnutls.org/security.html#GNUTLS-SA-2014-3\n\u003chttp://www.gnutls.org/security.html#GNUTLS-SA-2014-3\u003e\n\nThese security issues have been fixed:\n\n    * Possible memory corruption during connect (CVE-2014-3466)\n    * Multiple boundary check issues could allow DoS (CVE-2014-3467)\n    * asn1_get_bit_der() can return negative bit length (CVE-2014-3468)\n    * Possible DoS by NULL pointer dereference (CVE-2014-3469)\n\nSecurity Issue references:\n\n    * CVE-2014-3466\n      \u003chttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-3466\u003e\n\n","status":"published","published":"2014-06-03T20:02:07Z","modified":"2026-02-04T02:21:56.022429Z","updated_at":"2026-11-02T15:53:41.276824Z"},{"id":"UBUNTU-CVE-2014-0092","description":"lib/x509/verify.c in GnuTLS before 3.1.22 and 3.2.x before 3.2.12 does not properly handle unspecified errors when verifying X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers via a crafted certificate.","status":"published","published":"2014-03-03T00:00:00Z","modified":"2026-04-22T09:27:48.758809Z","updated_at":"2026-11-02T15:54:07.855521Z"}]}}