gnutls-debuginfo vulnerabilities (Red Hat)
77 vulnerabilities.
gnutls-debuginfoRed HatGnuTLS before 3.3.13 does not validate that the signature algorithms match when importing a...7.5 Highgnutls-debuginfoRed HatGnuTLS before 3.1.0 does not verify that the RSA PKCS #1 signature algorithm matches the...5.0 Mediumgnutls-debuginfoRed HatGnuTLS before 2.9.10 does not verify the activation and expiration dates of CA certificates,...4.3 Mediumgnutls-debuginfoRed HatThe gnutls_x509_dn_oid_name function in lib/x509/common.c in GnuTLS 3.0 before 3.1.20 and 3.2.x...5.0 Mediumgnutls-debuginfoRed HatThe (1) asn1_read_value_type and (2) asn1_read_value functions in GNU Libtasn1 before 3.6 allows...5.0 Mediumgnutls-debuginfoRed HatThe asn1_get_bit_der function in GNU Libtasn1 before 3.6 does not properly report an error when a...7.5 Highgnutls-debuginfoRed HatMultiple unspecified vulnerabilities in the DER decoder in GNU Libtasn1 before 3.6, as used in...5.0 Mediumgnutls-debuginfoRed HatBuffer overflow in the read_server_hello function in lib/gnutls_handshake.c in GnuTLS before 3.1...6.8 Mediumgnutls-debuginfoRed HatGnuTLS before 2.7.6, when the GNUTLS_VERIFY_ALLOW_X509_V1_CA_CRT flag is not enabled, treats...5.8 Mediumgnutls-debuginfoRed Hatlib/x509/verify.c in GnuTLS before 3.1.22 and 3.2.x before 3.2.12 does not properly handle...5.8 Mediumgnutls-debuginfoRed HatThe _gnutls_ciphertext2compressed function in lib/gnutls_cipher.c in GnuTLS 2.12.23 allows remote...5.0 Mediumgnutls-debuginfoRed HatThe TLS implementation in GnuTLS before 2.12.23, 3.0.x before 3.0.28, and 3.1.x before 3.1.7 does...4.0 Mediumgnutls-debuginfoRed Hatgnutls_cipher.c in libgnutls in GnuTLS before 2.12.17 and 3.x before 3.0.15 does not properly...5.0 Mediumgnutls-debuginfoRed HatThe asn1_get_length_der function in decoding.c in GNU Libtasn1 before 2.12, as used in GnuTLS...5.0 Mediumgnutls-debuginfoRed HatBuffer overflow in the gnutls_session_get_data function in lib/gnutls_session.c in GnuTLS 2.12.x...4.3 Mediumgnutls-debuginfoRed HatThe _gnutls_x509_oid2mac_algorithm function in lib/gnutls_algorithms.c in GnuTLS before 1.4.2...5.0 Mediumgnutls-debuginfoRed HatThe gnutls_x509_crt_get_serial function in the GnuTLS library before 1.2.1, when running on big...7.5 Highgnutls-debuginfoRed HatApache Tomcat affected by vulnerability in TLS and SSL protocol5.8 Mediumgnutls-debuginfoRed Hatlibgnutls in GnuTLS before 2.8.2 does not properly handle a '\0' character in a domain name in...7.5 Highgnutls-debuginfoRed HatThe Network Security Services (NSS) library before 3.12.3, as used in Firefox; GnuTLS before 2.6...5.1 Mediumgnutls-debuginfoRed HatThe _gnutls_x509_verify_certificate function in lib/x509/verify.c in libgnutls in GnuTLS before 2...5.9 Mediumgnutls-debuginfoRed HatInteger signedness error in the _gnutls_ciphertext2compressed function in lib/gnutls_cipher.c in...5.0 Mediumgnutls-debuginfoRed HatThe _gnutls_recv_client_kx_message function in lib/gnutls_kx.c in libgnutls in gnutls-serv in...9.3 Highgnutls-debuginfoRed HatThe _gnutls_server_name_recv_params function in lib/ext_server_name.c in libgnutls in gnutls-serv...10.0 Highgnutls-debuginfoRed Hatverify.c in GnuTLS before 1.4.4, when using an RSA key with exponent 3, does not properly handle...5.0 Mediumgnutls-debuginfoRed HatTiny ASN.1 Library (libtasn1) before 0.2.18, as used by (1) GnuTLS 1.2.x before 1.2.10 and 1.3.x...7.5 Highgnutls-debuginfoRed HatThe "record packet parsing" in GnuTLS 1.2 before 1.2.3 and 1.0 before 1.0.25 allows remote...5.0 Medium