gnutls28 vulnerabilities (Debian)
71 vulnerabilities.
gnutls28DebianMultiple heap-based buffer overflows in the read_attribute function in GnuTLS before 3.3.26 and 3...9.8 Criticalgnutls28DebianStack-based buffer overflow in the cdk_pk_get_keyid function in lib/opencdk/pubkey.c in GnuTLS...9.8 Criticalgnutls28DebianThe stream reading functions in lib/opencdk/read-packet.c in GnuTLS before 3.3.26 and 3.5.x...7.5 Highgnutls28DebianDouble free vulnerability in the gnutls_x509_ext_import_proxy function in GnuTLS before 3.3.26...9.8 Criticalgnutls28DebianThe gnutls_ocsp_resp_check_crt function in lib/x509/ocsp.c in GnuTLS before 3.4.15 and 3.5.x...7.5 Highgnutls28DebianMozilla Network Security Services (NSS) before 3.20.2, as used in Mozilla Firefox before 43.0.2...5.9 Mediumgnutls28DebianDouble free vulnerability in lib/x509/x509_ext.c in GnuTLS before 3.3.14 allows remote attackers...7.5 Highgnutls28DebianDouble free vulnerability in GnuTLS before 3.3.17 and 3.4.x before 3.4.4 allows remote attackers...5.0 Mediumgnutls28DebianThe _gnutls_ecc_ansi_x963_export function in gnutls_ecc.c in GnuTLS 3.x before 3.1.28, 3.2.x...5.0 Mediumgnutls28DebianGnuTLS before 3.3.13 does not validate that the signature algorithms match when importing a...7.5 Highgnutls28DebianThe gnutls_x509_dn_oid_name function in lib/x509/common.c in GnuTLS 3.0 before 3.1.20 and 3.2.x...5.0 Mediumgnutls28DebianBuffer overflow in the read_server_hello function in lib/gnutls_handshake.c in GnuTLS before 3.1...6.8 Mediumgnutls28Debianlib/x509/verify.c in GnuTLS before 3.1.22 and 3.2.x before 3.2.12 does not properly handle...5.8 Mediumgnutls28Debianlib/x509/verify.c in GnuTLS before 3.1.21 and 3.2.x before 3.2.11 treats version 1 X.509...5.8 Mediumgnutls28DebianThe TLS implementation in GnuTLS before 2.12.23, 3.0.x before 3.0.28, and 3.1.x before 3.1.7 does...4.0 Mediumgnutls28DebianThe SSL protocol 3.0, as used in OpenSSL through 1.0.1i and other products, uses nondeterministic...3.4 Lowgnutls28DebianThe TLS protocol 1.1 and 1.2 and the DTLS protocol 1.0 and 1.2, as used in OpenSSL, OpenJDK,...2.6 Lowgnutls28Debiangnutls_cipher.c in libgnutls in GnuTLS before 2.12.17 and 3.x before 3.0.15 does not properly...5.0 Mediumgnutls28DebianDouble free vulnerability in libgnutls in GnuTLS before 3.0.14 allows remote attackers to cause a...7.5 Highgnutls28DebianThe DTLS implementation in GnuTLS 3.0.10 and earlier executes certain error-handling code only if...4.3 Mediumgnutls28DebianThe SSL protocol, as used in certain configurations in Microsoft Windows and Microsoft Internet...4.3 Medium