{"id":"CVE-2014-8564","aliases":["DEBIAN-CVE-2014-8564","EUVD-2014-8401","GHSA-rp47-7r25-f53m","MGASA-2014-0458","RHSA-2014:1846","openSUSE-SU-2024:10105-1"],"status":"published","title":"The _gnutls_ecc_ansi_x963_export function in gnutls_ecc.c in GnuTLS 3.x before 3.1.28, 3.2.x...","description":"The _gnutls_ecc_ansi_x963_export function in gnutls_ecc.c in GnuTLS 3.x before 3.1.28, 3.2.x before 3.2.20, and 3.3.x before 3.3.10 allows remote attackers to cause a denial of service (out-of-bounds write) via a crafted (1) Elliptic Curve Cryptography (ECC) certificate or (2) certificate signing requests (CSR), related to generating key IDs.","severity":{"version":"2.0","score":5,"vector":"AV:N/AC:L/Au:N/C:N/I:N/A:P","level":"medium","assessor":"primary","from":"nvd"},"epss":{"day":"2026-11-07","score":0.03308,"percentile":0.88622,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":true},"cwes":["CWE-310"],"published":"2014-11-13T15:00:00Z","modified":"2026-10-23T15:47:27Z","fixes":[{"ecosystem":"Debian:12","package":"gnutls28","fixed_in":["3.3.8-4"],"sources":["osv"]},{"ecosystem":"Debian:13","package":"gnutls28","fixed_in":["3.3.8-4"],"sources":["osv"]},{"ecosystem":"Debian:14","package":"gnutls28","fixed_in":["3.3.8-4"],"sources":["osv"]},{"ecosystem":"Mageia:3","package":"gnutls","fixed_in":["3.1.16-1.4.mga3"],"sources":["osv"]},{"ecosystem":"Mageia:4","package":"gnutls","fixed_in":["3.2.7-1.4.mga4"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:7::client","package":"gnutls","fixed_in":["0:3.1.18-10.el7_0"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:7::client","package":"gnutls-dane","fixed_in":["0:3.1.18-10.el7_0"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:7::client","package":"gnutls-debuginfo","fixed_in":["0:3.1.18-10.el7_0"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:7::client","package":"gnutls-utils","fixed_in":["0:3.1.18-10.el7_0"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:7::client","package":"gnutls-c++","fixed_in":["0:3.1.18-10.el7_0"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:7::client","package":"gnutls-devel","fixed_in":["0:3.1.18-10.el7_0"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:7::computenode","package":"gnutls","fixed_in":["0:3.1.18-10.el7_0"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:7::computenode","package":"gnutls-dane","fixed_in":["0:3.1.18-10.el7_0"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:7::computenode","package":"gnutls-debuginfo","fixed_in":["0:3.1.18-10.el7_0"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:7::computenode","package":"gnutls-utils","fixed_in":["0:3.1.18-10.el7_0"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:7::computenode","package":"gnutls-c++","fixed_in":["0:3.1.18-10.el7_0"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:7::computenode","package":"gnutls-devel","fixed_in":["0:3.1.18-10.el7_0"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:7::server","package":"gnutls","fixed_in":["0:3.1.18-10.el7_0"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:7::server","package":"gnutls-c++","fixed_in":["0:3.1.18-10.el7_0"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:7::server","package":"gnutls-dane","fixed_in":["0:3.1.18-10.el7_0"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:7::server","package":"gnutls-debuginfo","fixed_in":["0:3.1.18-10.el7_0"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:7::server","package":"gnutls-devel","fixed_in":["0:3.1.18-10.el7_0"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:7::server","package":"gnutls-utils","fixed_in":["0:3.1.18-10.el7_0"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:7::workstation","package":"gnutls","fixed_in":["0:3.1.18-10.el7_0"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:7::workstation","package":"gnutls-c++","fixed_in":["0:3.1.18-10.el7_0"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:7::workstation","package":"gnutls-dane","fixed_in":["0:3.1.18-10.el7_0"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:7::workstation","package":"gnutls-debuginfo","fixed_in":["0:3.1.18-10.el7_0"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:7::workstation","package":"gnutls-devel","fixed_in":["0:3.1.18-10.el7_0"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:7::workstation","package":"gnutls-utils","fixed_in":["0:3.1.18-10.el7_0"],"sources":["osv"]}],"affected":[{"source":"osv","ecosystem":"Debian:12","package":"gnutls28","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.3.8-4"}]}]},{"source":"osv","ecosystem":"Debian:13","package":"gnutls28","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.3.8-4"}]}]},{"source":"osv","ecosystem":"Debian:14","package":"gnutls28","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.3.8-4"}]}]},{"source":"osv","ecosystem":"Mageia:3","package":"gnutls","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.1.16-1.4.mga3"}]}]},{"source":"osv","ecosystem":"Mageia:4","package":"gnutls","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.2.7-1.4.mga4"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::client","package":"gnutls","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.1.18-10.el7_0"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::client","package":"gnutls-dane","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.1.18-10.el7_0"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::client","package":"gnutls-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.1.18-10.el7_0"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::client","package":"gnutls-utils","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.1.18-10.el7_0"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::client","package":"gnutls-c++","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.1.18-10.el7_0"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::client","package":"gnutls-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.1.18-10.el7_0"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::computenode","package":"gnutls","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.1.18-10.el7_0"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::computenode","package":"gnutls-dane","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.1.18-10.el7_0"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::computenode","package":"gnutls-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.1.18-10.el7_0"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::computenode","package":"gnutls-utils","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.1.18-10.el7_0"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::computenode","package":"gnutls-c++","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.1.18-10.el7_0"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::computenode","package":"gnutls-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.1.18-10.el7_0"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::server","package":"gnutls","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.1.18-10.el7_0"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::server","package":"gnutls-c++","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.1.18-10.el7_0"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::server","package":"gnutls-dane","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.1.18-10.el7_0"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::server","package":"gnutls-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.1.18-10.el7_0"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::server","package":"gnutls-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.1.18-10.el7_0"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::server","package":"gnutls-utils","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.1.18-10.el7_0"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::workstation","package":"gnutls","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.1.18-10.el7_0"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::workstation","package":"gnutls-c++","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.1.18-10.el7_0"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::workstation","package":"gnutls-dane","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.1.18-10.el7_0"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::workstation","package":"gnutls-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.1.18-10.el7_0"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::workstation","package":"gnutls-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.1.18-10.el7_0"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::workstation","package":"gnutls-utils","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.1.18-10.el7_0"}]}]},{"source":"osv","ecosystem":"openSUSE:Tumbleweed","package":"gnutls","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.4.15-1.1"}]}],"bundled":10}],"products":[{"vendor":"canonical","product":"ubuntu_linux"},{"vendor":"gnu","product":"gnutls"},{"vendor":"opensuse","product":"opensuse"},{"vendor":"redhat","product":"enterprise_linux_desktop"},{"vendor":"redhat","product":"enterprise_linux_hpc_node"},{"vendor":"redhat","product":"enterprise_linux_server"},{"vendor":"redhat","product":"enterprise_linux_workstation"}],"references":[{"url":"http://secunia.com/advisories/59991","tags":["third-party-advisory","x_refsource_SECUNIA","x_transferred","advisory"]},{"url":"http://rhn.redhat.com/errata/RHSA-2014-1846.html","tags":["vendor-advisory","x_refsource_REDHAT","x_transferred","Third Party Advisory","advisory"]},{"url":"http://www.ubuntu.com/usn/USN-2403-1","tags":["vendor-advisory","x_refsource_UBUNTU","x_transferred","Patch","Third Party Advisory","advisory","fix"]},{"url":"http://secunia.com/advisories/62294","tags":["third-party-advisory","x_refsource_SECUNIA","x_transferred","advisory"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1161443","tags":["x_refsource_CONFIRM","x_transferred","Issue Tracking","report"]},{"url":"http://secunia.com/advisories/62284","tags":["third-party-advisory","x_refsource_SECUNIA","x_transferred","advisory"]},{"url":"http://lists.opensuse.org/opensuse-updates/2014-11/msg00084.html","tags":["vendor-advisory","x_refsource_SUSE","x_transferred","Third Party Advisory","advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2014-8564","tags":["advisory"]},{"url":"https://github.com/advisories/GHSA-rp47-7r25-f53m"},{"url":"https://security-tracker.debian.org/tracker/CVE-2014-8564","tags":["advisory"]},{"url":"https://advisories.mageia.org/MGASA-2014-0458.html","tags":["advisory"]},{"url":"https://bugs.mageia.org/show_bug.cgi?id=14527","tags":["report"]},{"url":"http://www.gnutls.org/security.html#GNUTLS-SA-2014-5","tags":["web"]},{"url":"https://rhn.redhat.com/errata/RHSA-2014-1846.html","tags":["web"]},{"url":"https://access.redhat.com/errata/RHSA-2014:1846","tags":["advisory"]},{"url":"https://access.redhat.com/security/updates/classification/#moderate","tags":["article"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2014/rhsa-2014_1846.json","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2014-8564","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2014-8564","tags":["advisory"]},{"url":"","tags":["advisory"]},{"url":"https://www.suse.com/security/cve/CVE-2008-4989","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2011-4128","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2012-0390","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2012-1569","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2012-1573","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-0092","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-1959","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-3466","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-8564","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-6251","tags":["web"]}],"sources":{"cve":[{"id":"CVE-2014-8564","description":"The _gnutls_ecc_ansi_x963_export function in gnutls_ecc.c in GnuTLS 3.x before 3.1.28, 3.2.x before 3.2.20, and 3.3.x before 3.3.10 allows remote attackers to cause a denial of service (out-of-bounds write) via a crafted (1) Elliptic Curve Cryptography (ECC) certificate or (2) certificate signing requests (CSR), related to generating key IDs.","status":"published","published":"2014-11-13T15:00:00Z","modified":"2024-08-06T13:18:48.419Z","updated_at":"2026-11-02T14:33:42.882687Z"}],"euvd":[{"id":"EUVD-2014-8401","description":"The _gnutls_ecc_ansi_x963_export function in gnutls_ecc.c in GnuTLS 3.x before 3.1.28, 3.2.x before 3.2.20, and 3.3.x before 3.3.10 allows remote attackers to cause a denial of service (out-of-bounds write) via a crafted (1) Elliptic Curve Cryptography (ECC) certificate or (2) certificate signing requests (CSR), related to generating key IDs.","status":"published","published":"2014-11-13T15:00:00Z","modified":"2024-08-06T13:18:48Z","updated_at":"2026-11-03T01:56:51.537817Z"}],"ghsa":[{"id":"GHSA-rp47-7r25-f53m","title":"The _gnutls_ecc_ansi_x963_export function in gnutls_ecc.c in GnuTLS 3.x before 3.1.28, 3.2.x...","description":"The _gnutls_ecc_ansi_x963_export function in gnutls_ecc.c in GnuTLS 3.x before 3.1.28, 3.2.x before 3.2.20, and 3.3.x before 3.3.10 allows remote attackers to cause a denial of service (out-of-bounds write) via a crafted (1) Elliptic Curve Cryptography (ECC) certificate or (2) certificate signing requests (CSR), related to generating key IDs.","status":"published","published":"2022-05-14T02:05:35Z","modified":"2023-02-02T05:04:52Z","updated_at":"2026-11-02T14:51:58.811434Z"}],"nvd":[{"id":"CVE-2014-8564","description":"The _gnutls_ecc_ansi_x963_export function in gnutls_ecc.c in GnuTLS 3.x before 3.1.28, 3.2.x before 3.2.20, and 3.3.x before 3.3.10 allows remote attackers to cause a denial of service (out-of-bounds write) via a crafted (1) Elliptic Curve Cryptography (ECC) certificate or (2) certificate signing requests (CSR), related to generating key IDs.","status":"published","published":"2014-11-13T21:32:13.427Z","modified":"2026-06-17T00:16:56.717Z","cvss":[{"version":"2.0","score":5,"vector":"AV:N/AC:L/Au:N/C:N/I:N/A:P","level":"medium","assessor":"primary"}],"cwes":["CWE-310"],"updated_at":"2026-11-02T14:02:57.304171Z"}],"osv":[{"id":"CVE-2014-8564","description":"The _gnutls_ecc_ansi_x963_export function in gnutls_ecc.c in GnuTLS 3.x before 3.1.28, 3.2.x before 3.2.20, and 3.3.x before 3.3.10 allows remote attackers to cause a denial of service (out-of-bounds write) via a crafted (1) Elliptic Curve Cryptography (ECC) certificate or (2) certificate signing requests (CSR), related to generating key IDs.","status":"published","published":"2014-11-13T21:32:13Z","modified":"2026-04-16T06:16:27.088586374Z","updated_at":"2026-11-02T15:44:00.097545Z"},{"id":"DEBIAN-CVE-2014-8564","description":"The _gnutls_ecc_ansi_x963_export function in gnutls_ecc.c in GnuTLS 3.x before 3.1.28, 3.2.x before 3.2.20, and 3.3.x before 3.3.10 allows remote attackers to cause a denial of service (out-of-bounds write) via a crafted (1) Elliptic Curve Cryptography (ECC) certificate or (2) certificate signing requests (CSR), related to generating key IDs.","status":"published","published":"2014-11-13T21:32:13.427Z","modified":"2026-10-23T15:47:27.819954937Z","updated_at":"2026-11-02T15:45:26.442161Z"},{"id":"MGASA-2014-0458","title":"Updated gnutls package fix security vulnerability","description":"An out-of-bounds memory write flaw was found in the way GnuTLS parsed\ncertain ECC (Elliptic Curve Cryptography) certificates or certificate\nsigning requests (CSR). A malicious user could create a specially crafted\nECC certificate or a certificate signing request that, when processed by an\napplication compiled against GnuTLS (for example, certtool), could cause\nthat application to crash or execute arbitrary code with the permissions of\nthe user running the application (CVE-2014-8564).\n","status":"published","published":"2014-11-15T18:31:46Z","modified":"2026-04-16T06:23:49.90172229Z","updated_at":"2026-11-02T15:49:39.488462Z"},{"id":"openSUSE-SU-2024:10105-1","title":"gnutls-3.4.15-1.1 on GA media","description":"These are all security issues fixed in the gnutls-3.4.15-1.1 package on the GA media of openSUSE Tumbleweed.","status":"published","published":"2024-06-15T00:00:00Z","modified":"2025-05-07T18:08:28.673202Z","updated_at":"2026-11-02T16:58:33.135986Z"},{"id":"RHSA-2014:1846","title":"Red Hat Security Advisory: gnutls security update","status":"published","published":"2024-09-15T22:10:33Z","modified":"2026-06-28T10:12:10Z","updated_at":"2026-11-02T15:53:02.532052Z"}]}}