gnutls vulnerabilities (Red Hat)
78 vulnerabilities.
gnutlsRed HatThe _gnutls_ecc_ansi_x963_export function in gnutls_ecc.c in GnuTLS 3.x before 3.1.28, 3.2.x...5.0 MediumgnutlsRed HatGnuTLS before 3.3.13 does not validate that the signature algorithms match when importing a...7.5 HighgnutlsRed HatGnuTLS before 3.1.0 does not verify that the RSA PKCS #1 signature algorithm matches the...5.0 MediumgnutlsRed HatGnuTLS before 2.9.10 does not verify the activation and expiration dates of CA certificates,...4.3 MediumgnutlsRed HatThe gnutls_x509_dn_oid_name function in lib/x509/common.c in GnuTLS 3.0 before 3.1.20 and 3.2.x...5.0 MediumgnutlsRed HatThe (1) asn1_read_value_type and (2) asn1_read_value functions in GNU Libtasn1 before 3.6 allows...5.0 MediumgnutlsRed HatThe asn1_get_bit_der function in GNU Libtasn1 before 3.6 does not properly report an error when a...7.5 HighgnutlsRed HatMultiple unspecified vulnerabilities in the DER decoder in GNU Libtasn1 before 3.6, as used in...5.0 MediumgnutlsRed HatBuffer overflow in the read_server_hello function in lib/gnutls_handshake.c in GnuTLS before 3.1...6.8 MediumgnutlsRed HatGnuTLS before 2.7.6, when the GNUTLS_VERIFY_ALLOW_X509_V1_CA_CRT flag is not enabled, treats...5.8 MediumgnutlsRed Hatlib/x509/verify.c in GnuTLS before 3.1.22 and 3.2.x before 3.2.12 does not properly handle...5.8 MediumgnutlsRed HatThe _gnutls_ciphertext2compressed function in lib/gnutls_cipher.c in GnuTLS 2.12.23 allows remote...5.0 MediumgnutlsRed HatThe TLS implementation in GnuTLS before 2.12.23, 3.0.x before 3.0.28, and 3.1.x before 3.1.7 does...4.0 MediumgnutlsRed Hatgnutls_cipher.c in libgnutls in GnuTLS before 2.12.17 and 3.x before 3.0.15 does not properly...5.0 MediumgnutlsRed HatThe asn1_get_length_der function in decoding.c in GNU Libtasn1 before 2.12, as used in GnuTLS...5.0 MediumgnutlsRed HatBuffer overflow in the gnutls_session_get_data function in lib/gnutls_session.c in GnuTLS 2.12.x...4.3 MediumgnutlsRed HatThe _gnutls_x509_oid2mac_algorithm function in lib/gnutls_algorithms.c in GnuTLS before 1.4.2...5.0 MediumgnutlsRed HatThe gnutls_x509_crt_get_serial function in the GnuTLS library before 1.2.1, when running on big...7.5 HighgnutlsRed HatApache Tomcat affected by vulnerability in TLS and SSL protocol5.8 MediumgnutlsRed Hatlibgnutls in GnuTLS before 2.8.2 does not properly handle a '\0' character in a domain name in...7.5 HighgnutlsRed HatThe Network Security Services (NSS) library before 3.12.3, as used in Firefox; GnuTLS before 2.6...5.1 MediumgnutlsRed HatThe _gnutls_x509_verify_certificate function in lib/x509/verify.c in libgnutls in GnuTLS before 2...5.9 MediumgnutlsRed HatInteger signedness error in the _gnutls_ciphertext2compressed function in lib/gnutls_cipher.c in...5.0 MediumgnutlsRed HatThe _gnutls_recv_client_kx_message function in lib/gnutls_kx.c in libgnutls in gnutls-serv in...9.3 HighgnutlsRed HatThe _gnutls_server_name_recv_params function in lib/ext_server_name.c in libgnutls in gnutls-serv...10.0 HighgnutlsRed Hatverify.c in GnuTLS before 1.4.4, when using an RSA key with exponent 3, does not properly handle...5.0 MediumgnutlsRed HatTiny ASN.1 Library (libtasn1) before 0.2.18, as used by (1) GnuTLS 1.2.x before 1.2.10 and 1.3.x...7.5 HighgnutlsRed HatThe "record packet parsing" in GnuTLS 1.2 before 1.2.3 and 1.0 before 1.0.25 allows remote...5.0 Medium