{"id":"CVE-2015-0282","aliases":["DLA-180-1","DSA-3191-1","EUVD-2015-0295","GHSA-qx46-76qj-r7r3","RHSA-2015:1457","SUSE-SU-2015:0675-1","UBUNTU-CVE-2015-0282","USN-2540-1"],"status":"published","title":"GnuTLS before 3.1.0 does not verify that the RSA PKCS #1 signature algorithm matches the...","description":"GnuTLS before 3.1.0 does not verify that the RSA PKCS #1 signature algorithm matches the signature algorithm in the certificate, which allows remote attackers to conduct downgrade attacks via unspecified vectors.","severity":{"version":"2.0","score":5,"vector":"AV:N/AC:L/Au:N/C:N/I:P/A:N","level":"medium","assessor":"primary","from":"nvd"},"epss":{"day":"2026-11-07","score":0.01397,"percentile":0.7259,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":true},"cwes":["CWE-310"],"published":"2014-06-03T20:02:07Z","modified":"2026-06-26T12:21:49Z","fixes":[{"ecosystem":"Ubuntu:14.04:LTS","package":"gnutls26","fixed_in":["2.12.23-12ubuntu2.2"],"sources":["osv"]}],"affected":[{"source":"osv","ecosystem":"Debian:6.0","package":"gnutls26","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.8.6-1+squeeze5"}]}],"versions":["2.8.6-1","2.8.6-1+squeeze1","2.8.6-1+squeeze2","2.8.6-1+squeeze3","2.8.6-1+squeeze4"],"bundled":3},{"source":"osv","ecosystem":"Debian:7","package":"gnutls26","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.12.20-8+deb7u3"}]}],"versions":["2.12.20-6","2.12.20-7","2.12.20-8","2.12.20-8+deb7u1","2.12.20-8+deb7u2"],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::client","package":"gnutls-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.8.5-18.el6"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::client","package":"gnutls-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.8.5-18.el6"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::client","package":"gnutls-guile","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.8.5-18.el6"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::client","package":"gnutls","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.8.5-18.el6"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::client","package":"gnutls-utils","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.8.5-18.el6"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::computenode","package":"gnutls-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.8.5-18.el6"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::computenode","package":"gnutls-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.8.5-18.el6"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::computenode","package":"gnutls-guile","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.8.5-18.el6"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::computenode","package":"gnutls","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.8.5-18.el6"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::computenode","package":"gnutls-utils","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.8.5-18.el6"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::server","package":"gnutls-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.8.5-18.el6"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::server","package":"gnutls-guile","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.8.5-18.el6"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::server","package":"gnutls","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.8.5-18.el6"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::server","package":"gnutls-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.8.5-18.el6"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::server","package":"gnutls-utils","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.8.5-18.el6"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::workstation","package":"gnutls-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.8.5-18.el6"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::workstation","package":"gnutls-guile","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.8.5-18.el6"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::workstation","package":"gnutls","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.8.5-18.el6"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::workstation","package":"gnutls-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.8.5-18.el6"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::workstation","package":"gnutls-utils","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.8.5-18.el6"}]}],"bundled":3},{"source":"osv","ecosystem":"Ubuntu:14.04:LTS","package":"gnutls26","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.12.23-12ubuntu2.2"}]}],"versions":["2.12.23-1ubuntu4","2.12.23-1ubuntu5","2.12.23-12ubuntu1","2.12.23-12ubuntu2","2.12.23-12ubuntu2.1"]},{"source":"osv","ecosystem":"Ubuntu:14.04:LTS","package":"gnutls26","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.12.23-12ubuntu2.2"}]}],"versions":["2.12.23-1ubuntu4","2.12.23-1ubuntu5","2.12.23-12ubuntu1","2.12.23-12ubuntu2","2.12.23-12ubuntu2.1"],"bundled":2}],"products":[{"vendor":"gnu","product":"gnutls"}],"references":[{"url":"http://www.gnutls.org/security.html","tags":["x_refsource_CONFIRM","x_transferred","Vendor Advisory"]},{"url":"http://www.debian.org/security/2015/dsa-3191","tags":["vendor-advisory","x_refsource_DEBIAN","x_transferred"]},{"url":"http://www.securityfocus.com/bid/73119","tags":["vdb-entry","x_refsource_BID","x_transferred"]},{"url":"http://rhn.redhat.com/errata/RHSA-2015-1457.html","tags":["vendor-advisory","x_refsource_REDHAT","x_transferred"]},{"url":"http://www.securitytracker.com/id/1032148","tags":["vdb-entry","x_refsource_SECTRACK","x_transferred"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2015-0282","tags":["advisory"]},{"url":"https://github.com/advisories/GHSA-qx46-76qj-r7r3"},{"url":"https://access.redhat.com/errata/RHSA-2015:1457","tags":["advisory"]},{"url":"https://access.redhat.com/security/updates/classification/#moderate","tags":["article"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1036385","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1194371","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1196323","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1197995","tags":["report"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2015/rhsa-2015_1457.json","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2014-8155","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2014-8155","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2014-8155","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2015-0282","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2015-0282","tags":["advisory","report"]},{"url":"https://access.redhat.com/security/cve/CVE-2015-0294","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2015-0294","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2015-0294","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2015/suse-su-20150675-1/","tags":["advisory"]},{"url":"https://bugzilla.suse.com/821818","tags":["report"]},{"url":"https://bugzilla.suse.com/835760","tags":["report"]},{"url":"https://bugzilla.suse.com/865804","tags":["report"]},{"url":"https://bugzilla.suse.com/865993","tags":["report"]},{"url":"https://bugzilla.suse.com/880730","tags":["report"]},{"url":"https://bugzilla.suse.com/880910","tags":["report"]},{"url":"https://bugzilla.suse.com/919938","tags":["report"]},{"url":"https://bugzilla.suse.com/921684","tags":["report"]},{"url":"https://www.suse.com/security/cve/CVE-2009-5138","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2013-2116","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-0092","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-3466","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-8155","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-0282","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-0294","tags":["web"]},{"url":"https://ubuntu.com/security/CVE-2015-0282","tags":["report"]},{"url":"http://www.gnutls.org/security.html#GNUTLS-SA-2015-1","tags":["report"]},{"url":"https://ubuntu.com/security/notices/USN-2540-1","tags":["advisory"]},{"url":"https://ubuntu.com/security/CVE-2014-8155","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2015-0294","tags":["report"]}],"sources":{"cve":[{"id":"CVE-2015-0282","description":"GnuTLS before 3.1.0 does not verify that the RSA PKCS #1 signature algorithm matches the signature algorithm in the certificate, which allows remote attackers to conduct downgrade attacks via unspecified vectors.","status":"published","published":"2015-03-24T17:00:00Z","modified":"2024-08-06T04:03:10.835Z","updated_at":"2026-11-02T14:35:45.428221Z"}],"euvd":[{"id":"EUVD-2015-0295","description":"GnuTLS before 3.1.0 does not verify that the RSA PKCS #1 signature algorithm matches the signature algorithm in the certificate, which allows remote attackers to conduct downgrade attacks via unspecified vectors.","status":"published","published":"2015-03-24T17:00:00Z","modified":"2024-08-06T04:03:10Z","updated_at":"2026-11-03T02:22:20.481932Z"}],"ghsa":[{"id":"GHSA-qx46-76qj-r7r3","title":"GnuTLS before 3.1.0 does not verify that the RSA PKCS #1 signature algorithm matches the...","description":"GnuTLS before 3.1.0 does not verify that the RSA PKCS #1 signature algorithm matches the signature algorithm in the certificate, which allows remote attackers to conduct downgrade attacks via unspecified vectors.","status":"published","published":"2022-05-14T03:59:29Z","modified":"2023-02-03T05:00:57Z","updated_at":"2026-11-02T14:52:53.034472Z"}],"nvd":[{"id":"CVE-2015-0282","description":"GnuTLS before 3.1.0 does not verify that the RSA PKCS #1 signature algorithm matches the signature algorithm in the certificate, which allows remote attackers to conduct downgrade attacks via unspecified vectors.","status":"published","published":"2015-03-24T17:59:04.007Z","modified":"2026-06-17T00:19:54.13Z","cvss":[{"version":"2.0","score":5,"vector":"AV:N/AC:L/Au:N/C:N/I:P/A:N","level":"medium","assessor":"primary"}],"cwes":["CWE-310"],"updated_at":"2026-11-02T14:03:03.313464Z"}],"osv":[{"id":"DLA-180-1","title":"gnutls26 - security update","status":"published","published":"2015-03-25T00:00:00Z","modified":"2026-03-09T01:23:20.361353Z","updated_at":"2026-11-02T15:46:09.777694Z"},{"id":"DSA-3191-1","title":"gnutls26 - security update","status":"published","published":"2015-03-15T00:00:00Z","modified":"2026-03-09T01:19:46.04443Z","updated_at":"2026-11-02T15:46:15.843838Z"},{"id":"RHSA-2015:1457","title":"Red Hat Security Advisory: gnutls security and bug fix update","status":"published","published":"2024-09-15T22:18:32Z","modified":"2026-06-26T12:21:49.257993576Z","updated_at":"2026-11-02T15:53:03.182161Z"},{"id":"SUSE-SU-2015:0675-1","title":"Security update for gnutls","description":"\nGnuTLS has been patched to ensure proper parsing of session ids during the \nTLS/SSL handshake. Additionally, three issues inherited from libtasn1 have \nbeen fixed.\n\nFurther information is available at \nhttp://www.gnutls.org/security.html#GNUTLS-SA-2014-3\n\u003chttp://www.gnutls.org/security.html#GNUTLS-SA-2014-3\u003e\n\nThese security issues have been fixed:\n\n    * Possible memory corruption during connect (CVE-2014-3466)\n    * Multiple boundary check issues could allow DoS (CVE-2014-3467)\n    * asn1_get_bit_der() can return negative bit length (CVE-2014-3468)\n    * Possible DoS by NULL pointer dereference (CVE-2014-3469)\n\nSecurity Issue references:\n\n    * CVE-2014-3466\n      \u003chttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-3466\u003e\n\n","status":"published","published":"2014-06-03T20:02:07Z","modified":"2026-02-04T02:21:56.022429Z","updated_at":"2026-11-02T15:53:41.276824Z"},{"id":"UBUNTU-CVE-2015-0282","description":"GnuTLS before 3.1.0 does not verify that the RSA PKCS #1 signature algorithm matches the signature algorithm in the certificate, which allows remote attackers to conduct downgrade attacks via unspecified vectors.","status":"published","published":"2015-03-12T00:00:00Z","modified":"2026-04-22T09:55:25.36774Z","updated_at":"2026-11-02T15:54:09.721803Z"},{"id":"USN-2540-1","title":"gnutls26, gnutls28 vulnerabilities","description":"It was discovered that GnuTLS did not perform date and time checks on\nCA certificates, contrary to expectations. This issue only affected\nUbuntu 10.04 LTS. (CVE-2014-8155)\n\nNikos Mavrogiannopoulos discovered that GnuTLS incorrectly verified that\nsignature algorithms matched. A remote attacker could possibly use this\nissue to downgrade to a disallowed algorithm. This issue only affected\nUbuntu 10.04 LTS, Ubuntu 12.04 LTS and Ubuntu 14.04 LTS. (CVE-2015-0282)\n\nIt was discovered that GnuTLS incorrectly verified certificate algorithms.\nA remote attacker could possibly use this issue to downgrade to a\ndisallowed algorithm. (CVE-2015-0294)\n","status":"published","published":"2015-03-23T19:13:13Z","modified":"2026-04-22T09:10:00.928608Z","updated_at":"2026-11-02T16:58:09.227524Z"}]}}