gnutls28 vulnerabilities (Debian)
71 vulnerabilities.
-
gnutls28Debian Improper certificate validation in gnutls v3.8.13 causes the application to accept certificates... 4.8 Medium -
gnutls28Debian An issue in gnutls v3.8.13 causes legitimate CA certificates to be rejected, leading to a Denial... 7.5 High -
gnutls28Debian Improper certificate validation in gnutls v3.8.13 causes the application to reject legitimate... 5.9 Medium -
gnutls28Debian Incomplete X.509 implementation in GnuTLS v3.8.13 allows attackers controlling a subordinate... 3.7 Low -
gnutls28Debian A hostname verification bypass in GnuTLS v3.8.13 allows attackers to circumvent the Common Name... 6.5 Medium -
gnutls28Debian An issue in gnutls v.3.8.13 allows an attacker to obtain sensitive information via failing to... 3.7 Low -
gnutls28Debian Gnutls: gnutls: security bypass due to incorrect name constraint handling 7.4 High -
gnutls28Debian Gnutls: gnutls: authentication bypass via nul character in username 7.1 High -
gnutls28Debian Gnutls: gnutls: denial of service via heap buffer overflow in dtls handshake fragment reassembly 7.5 High -
gnutls28Debian Gnutls: gnutls: denial of service via dtls zero-length fragment 7.5 High -
gnutls28Debian Gnutls: gnutls: security bypass allows acceptance of revoked server certificates via crafted ocsp response 3.7 Low -
gnutls28Debian Gnutls: gnutls: policy bypass due to case-sensitive nameconstraints comparison 6.5 Medium -
gnutls28Debian Gnutls: gnutls: information disclosure via timing side-channel in pkcs#7 padding removal 3.7 Low -
gnutls28Debian Gnutls: gnutls: information disclosure via heap overread in rsa key exchange 8.2 High -
gnutls28Debian Gnutls: gnutls: memory corruption due to off-by-one error in pkcs#12 bag handling 5.3 Medium -
gnutls28Debian Gnutls: gnutls: use-after-free in gnutls_pkcs11_token_set_pin 6.6 Medium -
gnutls28Debian Gnutls: gnutls: certificate validation bypass due to oversized subject alternative name 8.2 High -
gnutls28Debian Gnutls: gnutls: certificate validation bypass due to improper handling of uri and srv sans 7.1 High -
gnutls28Debian Gnutls: gnutls: denial of service via dtls packet reordering vulnerability 7.5 High -
gnutls28Debian Gnutls: gnutls: remote denial of service via crafted clienthello with invalid psk binder 7.5 High -
gnutls28Debian Gnutls: gnutls: denial of service via excessive resource consumption during certificate verification 5.3 Medium -
gnutls28Debian Gnutls: stack-based buffer overflow in gnutls_pkcs11_token_init() function 4.0 Medium -
gnutls28Debian Gnutls: null pointer dereference in _gnutls_figure_common_ciphersuite() 6.5 Medium -
gnutls28Debian Gnutls: vulnerability in gnutls certtool template parsing 6.5 Medium -
gnutls28Debian Gnutls: vulnerability in gnutls sct extension parsing 5.3 Medium -
gnutls28Debian Gnutls: vulnerability in gnutls othername san export 6.5 Medium -
gnutls28Debian Gnutls: gnutls impacted by inefficient der decoding in libtasn1 leading to remote dos 5.3 Medium -
gnutls28Debian Gnutls: vulnerable to minerva side-channel information leak 5.3 Medium -
gnutls28Debian Gnutls: potential crash during chain building/verification 5.0 Medium -
gnutls28Debian Gnutls: rejects certificate chain with distributed trust 7.5 High -
gnutls28Debian Gnutls: incomplete fix for cve-2023-5981 7.5 High -
gnutls28Debian Gnutls: timing side-channel in the rsa-psk authentication 5.9 Medium -
gnutls28Debian A timing side-channel in the handling of RSA ClientKeyExchange messages was discovered in GnuTLS.... 7.4 High -
gnutls28Debian A vulnerability found in gnutls. This security flaw happens because of a double free error occurs... 7.5 High -
gnutls28Debian A NULL pointer dereference flaw was found in GnuTLS. As Nettle's hash update functions internally... 6.5 Medium -
gnutls28Debian gnutls28 - security update No score -
gnutls28Debian A flaw was found in gnutls. A use after free issue in client_send_params in lib/ext... 9.8 Critical -
gnutls28Debian A flaw was found in gnutls. A use after free issue in client sending key_share extension may lead... 9.8 Critical -
gnutls28Debian An issue was discovered in GnuTLS before 3.6.15. A server can trigger a NULL pointer dereference... 7.5 High -
gnutls28Debian GnuTLS 3.6.x before 3.6.14 uses incorrect cryptography for encrypting a session ticket (a loss of... 7.4 High -
gnutls28Debian GnuTLS 3.6.x before 3.6.13 uses incorrect cryptography for DTLS. The earliest affected version is... 7.4 High -
gnutls28Debian It was discovered in gnutls before version 3.6.7 upstream that there is an uninitialized pointer... 5.9 Medium -
gnutls28Debian A vulnerability was found in gnutls versions from 3.5.8 before 3.6.7. A memory corruption (double... 5.3 Medium -
gnutls28Debian A Bleichenbacher type side-channel based padding oracle attack was found in the way gnutls... 4.7 Medium -
gnutls28Debian A cache-based side channel in GnuTLS implementation that leads to plain text recovery in cross-VM... 5.3 Medium -
gnutls28Debian It was found that the GnuTLS implementation of HMAC-SHA-384 was vulnerable to a Lucky thirteen... 5.9 Medium -
gnutls28Debian It was found that the GnuTLS implementation of HMAC-SHA-256 was vulnerable to a Lucky thirteen... 5.9 Medium -
gnutls28Debian The "GNUTLS_KEYLOGFILE" environment variable in gnutls 3.4.12 allows remote attackers to... 7.5 High -
gnutls28Debian GnuTLS version 3.5.12 and earlier is vulnerable to a NULL pointer dereference while decoding a... 7.5 High -
gnutls28Debian GnuTLS before 2017-02-20 has an out-of-bounds write caused by an integer overflow and heap-based... 7.5 High - Show olderLoading…