gnutls-dane vulnerabilities (Red Hat)
52 vulnerabilities.
-
gnutls-daneRed Hat Gnutls: gnutls: security bypass due to incorrect name constraint handling 7.4 High -
gnutls-daneRed Hat Gnutls: gnutls: authentication bypass via nul character in username 7.1 High -
gnutls-daneRed Hat Gnutls: gnutls: denial of service via heap buffer overflow in dtls handshake fragment reassembly 7.5 High -
gnutls-daneRed Hat Gnutls: gnutls: denial of service via dtls zero-length fragment 7.5 High -
gnutls-daneRed Hat Gnutls: gnutls: security bypass allows acceptance of revoked server certificates via crafted ocsp response 3.7 Low -
gnutls-daneRed Hat Gnutls: gnutls: policy bypass due to case-sensitive nameconstraints comparison 6.5 Medium -
gnutls-daneRed Hat Gnutls: gnutls: information disclosure via timing side-channel in pkcs#7 padding removal 3.7 Low -
gnutls-daneRed Hat Gnutls: gnutls: information disclosure via heap overread in rsa key exchange 8.2 High -
gnutls-daneRed Hat Gnutls: gnutls: memory corruption due to off-by-one error in pkcs#12 bag handling 5.3 Medium -
gnutls-daneRed Hat Gnutls: gnutls: use-after-free in gnutls_pkcs11_token_set_pin 6.6 Medium -
gnutls-daneRed Hat Gnutls: gnutls: certificate validation bypass due to oversized subject alternative name 8.2 High -
gnutls-daneRed Hat Gnutls: gnutls: certificate validation bypass due to improper handling of uri and srv sans 7.1 High -
gnutls-daneRed Hat Gnutls: gnutls: denial of service via dtls packet reordering vulnerability 7.5 High -
gnutls-daneRed Hat Gnutls: gnutls: remote denial of service via crafted clienthello with invalid psk binder 7.5 High -
gnutls-daneRed Hat Gnutls: gnutls: denial of service via excessive resource consumption during certificate verification 5.3 Medium -
gnutls-daneRed Hat Gnutls: stack-based buffer overflow in gnutls_pkcs11_token_init() function 4.0 Medium -
gnutls-daneRed Hat Gnutls: null pointer dereference in _gnutls_figure_common_ciphersuite() 6.5 Medium -
gnutls-daneRed Hat Gnutls: vulnerability in gnutls certtool template parsing 6.5 Medium -
gnutls-daneRed Hat Gnutls: vulnerability in gnutls sct extension parsing 5.3 Medium -
gnutls-daneRed Hat Gnutls: vulnerability in gnutls othername san export 6.5 Medium -
gnutls-daneRed Hat Gnutls: gnutls impacted by inefficient der decoding in libtasn1 leading to remote dos 5.3 Medium -
gnutls-daneRed Hat Libtasn1: inefficient der decoding in libtasn1 leading to potential remote dos 5.3 Medium -
gnutls-daneRed Hat Gnutls: vulnerable to minerva side-channel information leak 5.3 Medium -
gnutls-daneRed Hat Gnutls: potential crash during chain building/verification 5.0 Medium -
gnutls-daneRed Hat Gnutls: rejects certificate chain with distributed trust 7.5 High -
gnutls-daneRed Hat Gnutls: incomplete fix for cve-2023-5981 7.5 High -
gnutls-daneRed Hat Gnutls: timing side-channel in the rsa-psk authentication 5.9 Medium -
gnutls-daneRed Hat A timing side-channel in the handling of RSA ClientKeyExchange messages was discovered in GnuTLS.... 7.4 High -
gnutls-daneRed Hat A vulnerability found in gnutls. This security flaw happens because of a double free error occurs... 7.5 High -
gnutls-daneRed Hat A flaw was found in the way nettle's RSA decryption functions handled specially crafted... 7.5 High -
gnutls-daneRed Hat A flaw was found in Nettle in versions before 3.7.2, where several Nettle signature verification... 8.1 High -
gnutls-daneRed Hat A flaw was found in gnutls. A use after free issue in client_send_params in lib/ext... 9.8 Critical -
gnutls-daneRed Hat A flaw was found in gnutls. A use after free issue in client sending key_share extension may lead... 9.8 Critical -
gnutls-daneRed Hat An issue was discovered in GnuTLS before 3.6.15. A server can trigger a NULL pointer dereference... 7.5 High -
gnutls-daneRed Hat GnuTLS 3.6.x before 3.6.14 uses incorrect cryptography for encrypting a session ticket (a loss of... 7.4 High -
gnutls-daneRed Hat GnuTLS 3.6.x before 3.6.13 uses incorrect cryptography for DTLS. The earliest affected version is... 7.4 High -
gnutls-daneRed Hat It was discovered in gnutls before version 3.6.7 upstream that there is an uninitialized pointer... 5.9 Medium -
gnutls-daneRed Hat A vulnerability was found in gnutls versions from 3.5.8 before 3.6.7. A memory corruption (double... 5.3 Medium -
gnutls-daneRed Hat A cache-based side channel in GnuTLS implementation that leads to plain text recovery in cross-VM... 5.3 Medium -
gnutls-daneRed Hat It was found that the GnuTLS implementation of HMAC-SHA-384 was vulnerable to a Lucky thirteen... 5.9 Medium -
gnutls-daneRed Hat It was found that the GnuTLS implementation of HMAC-SHA-256 was vulnerable to a Lucky thirteen... 5.9 Medium -
gnutls-daneRed Hat GnuTLS version 3.5.12 and earlier is vulnerable to a NULL pointer dereference while decoding a... 7.5 High -
gnutls-daneRed Hat GnuTLS before 2017-02-20 has an out-of-bounds write caused by an integer overflow and heap-based... 7.5 High -
gnutls-daneRed Hat Multiple heap-based buffer overflows in the read_attribute function in GnuTLS before 3.3.26 and 3... 9.8 Critical -
gnutls-daneRed Hat Stack-based buffer overflow in the cdk_pk_get_keyid function in lib/opencdk/pubkey.c in GnuTLS... 9.8 Critical -
gnutls-daneRed Hat The stream reading functions in lib/opencdk/read-packet.c in GnuTLS before 3.3.26 and 3.5.x... 7.5 High -
gnutls-daneRed Hat Double free vulnerability in the gnutls_x509_ext_import_proxy function in GnuTLS before 3.3.26... 9.8 Critical -
gnutls-daneRed Hat The gnutls_ocsp_resp_check_crt function in lib/x509/ocsp.c in GnuTLS before 3.4.15 and 3.5.x... 7.5 High -
gnutls-daneRed Hat Mozilla Network Security Services (NSS) before 3.20.2, as used in Mozilla Firefox before 43.0.2... 5.9 Medium -
gnutls-daneRed Hat The _gnutls_ecc_ansi_x963_export function in gnutls_ecc.c in GnuTLS 3.x before 3.1.28, 3.2.x... 5.0 Medium - Show olderLoading…