gnutls-devel vulnerabilities (TuxCare)
29 vulnerabilities.
gnutls-develTuxCareGnutls: gnutls: security bypass due to incorrect name constraint handling7.4 Highgnutls-develTuxCareGnutls: gnutls: authentication bypass via nul character in username7.1 Highgnutls-develTuxCareGnutls: gnutls: denial of service via heap buffer overflow in dtls handshake fragment reassembly7.5 Highgnutls-develTuxCareGnutls: gnutls: denial of service via dtls zero-length fragment7.5 Highgnutls-develTuxCareGnutls: gnutls: policy bypass due to case-sensitive nameconstraints comparison6.5 Mediumgnutls-develTuxCareGnutls: gnutls: information disclosure via heap overread in rsa key exchange8.2 Highgnutls-develTuxCareGnutls: gnutls: memory corruption due to off-by-one error in pkcs#12 bag handling5.3 Mediumgnutls-develTuxCareGnutls: gnutls: use-after-free in gnutls_pkcs11_token_set_pin6.6 Mediumgnutls-develTuxCareGnutls: gnutls: certificate validation bypass due to oversized subject alternative name8.2 Highgnutls-develTuxCareGnutls: gnutls: certificate validation bypass due to improper handling of uri and srv sans7.1 Highgnutls-develTuxCareGnutls: gnutls: denial of service via dtls packet reordering vulnerability7.5 Highgnutls-develTuxCareUpdate of gnutlsNo scoregnutls-develTuxCareGnutls: stack-based buffer overflow in gnutls_pkcs11_token_init() function4.0 Mediumgnutls-develTuxCareUpdate of gnutlsNo scoregnutls-develTuxCareUpdate of gnutlsNo scoregnutls-develTuxCareGnutls: null pointer dereference in _gnutls_figure_common_ciphersuite()6.5 Mediumgnutls-develTuxCareGnutls: vulnerability in gnutls certtool template parsing6.5 Mediumgnutls-develTuxCareGnutls: vulnerability in gnutls sct extension parsing5.3 Mediumgnutls-develTuxCareGnutls: vulnerability in gnutls othername san export6.5 Mediumgnutls-develTuxCareUpdate of gnutlsNo scoregnutls-develTuxCareUpdate of gnutlsNo scoregnutls-develTuxCareGnutls: gnutls impacted by inefficient der decoding in libtasn1 leading to remote dos5.3 Mediumgnutls-develTuxCareGnutls: vulnerable to minerva side-channel information leak5.3 Mediumgnutls-develTuxCareGnutls: potential crash during chain building/verification5.0 Mediumgnutls-develTuxCareGnutls: rejects certificate chain with distributed trust7.5 Highgnutls-develTuxCareGnutls: incomplete fix for cve-2023-59817.5 Highgnutls-develTuxCareGnutls: timing side-channel in the rsa-psk authentication5.9 Mediumgnutls-develTuxCareA timing side-channel in the handling of RSA ClientKeyExchange messages was discovered in GnuTLS....7.4 Highgnutls-develTuxCareA vulnerability found in gnutls. This security flaw happens because of a double free error occurs...7.5 High