gnutls28 vulnerabilities (Ubuntu)
55 vulnerabilities.
-
gnutls28Ubuntu Improper certificate validation in gnutls v3.8.13 causes the application to accept certificates... 4.8 Medium -
gnutls28Ubuntu An issue in gnutls v3.8.13 causes legitimate CA certificates to be rejected, leading to a Denial... 7.5 High -
gnutls28Ubuntu Improper certificate validation in gnutls v3.8.13 causes the application to reject legitimate... 5.9 Medium -
gnutls28Ubuntu Incomplete X.509 implementation in GnuTLS v3.8.13 allows attackers controlling a subordinate... 3.7 Low -
gnutls28Ubuntu A hostname verification bypass in GnuTLS v3.8.13 allows attackers to circumvent the Common Name... 6.5 Medium -
gnutls28Ubuntu An issue in gnutls v.3.8.13 allows an attacker to obtain sensitive information via failing to... 3.7 Low -
gnutls28Ubuntu Gnutls: gnutls: security bypass due to incorrect name constraint handling 7.4 High -
gnutls28Ubuntu Gnutls: gnutls: authentication bypass via nul character in username 7.1 High -
gnutls28Ubuntu Gnutls: gnutls: denial of service via heap buffer overflow in dtls handshake fragment reassembly 7.5 High -
gnutls28Ubuntu Gnutls: gnutls: denial of service via dtls zero-length fragment 7.5 High -
gnutls28Ubuntu Gnutls: gnutls: security bypass allows acceptance of revoked server certificates via crafted ocsp response 3.7 Low -
gnutls28Ubuntu Gnutls: gnutls: policy bypass due to case-sensitive nameconstraints comparison 6.5 Medium -
gnutls28Ubuntu Gnutls: gnutls: information disclosure via timing side-channel in pkcs#7 padding removal 3.7 Low -
gnutls28Ubuntu Gnutls: gnutls: information disclosure via heap overread in rsa key exchange 8.2 High -
gnutls28Ubuntu Gnutls: gnutls: memory corruption due to off-by-one error in pkcs#12 bag handling 5.3 Medium -
gnutls28Ubuntu Gnutls: gnutls: use-after-free in gnutls_pkcs11_token_set_pin 6.6 Medium -
gnutls28Ubuntu Gnutls: gnutls: certificate validation bypass due to oversized subject alternative name 8.2 High -
gnutls28Ubuntu Gnutls: gnutls: certificate validation bypass due to improper handling of uri and srv sans 7.1 High -
gnutls28Ubuntu Gnutls: gnutls: denial of service via dtls packet reordering vulnerability 7.5 High -
gnutls28Ubuntu Gnutls: gnutls: denial of service via excessive resource consumption during certificate verification 5.3 Medium -
gnutls28Ubuntu Gnutls: stack-based buffer overflow in gnutls_pkcs11_token_init() function 4.0 Medium -
gnutls28Ubuntu Gnutls: null pointer dereference in _gnutls_figure_common_ciphersuite() 6.5 Medium -
gnutls28Ubuntu Gnutls: vulnerability in gnutls certtool template parsing 6.5 Medium -
gnutls28Ubuntu Gnutls: vulnerability in gnutls sct extension parsing 5.3 Medium -
gnutls28Ubuntu Gnutls: vulnerability in gnutls othername san export 6.5 Medium -
gnutls28Ubuntu Gnutls: gnutls impacted by inefficient der decoding in libtasn1 leading to remote dos 5.3 Medium -
gnutls28Ubuntu Gnutls: vulnerable to minerva side-channel information leak 5.3 Medium -
gnutls28Ubuntu Gnutls: potential crash during chain building/verification 5.0 Medium -
gnutls28Ubuntu Gnutls: rejects certificate chain with distributed trust 7.5 High -
gnutls28Ubuntu Gnutls: incomplete fix for cve-2023-5981 7.5 High -
gnutls28Ubuntu Gnutls: timing side-channel in the rsa-psk authentication 5.9 Medium -
gnutls28Ubuntu A timing side-channel in the handling of RSA ClientKeyExchange messages was discovered in GnuTLS.... 7.4 High -
gnutls28Ubuntu A vulnerability found in gnutls. This security flaw happens because of a double free error occurs... 7.5 High -
gnutls28Ubuntu A NULL pointer dereference flaw was found in GnuTLS. As Nettle's hash update functions internally... 6.5 Medium -
gnutls28Ubuntu A flaw was found in gnutls. A use after free issue in client_send_params in lib/ext... 9.8 Critical -
gnutls28Ubuntu A flaw was found in gnutls. A use after free issue in client sending key_share extension may lead... 9.8 Critical -
gnutls28Ubuntu An issue was discovered in GnuTLS before 3.6.15. A server can trigger a NULL pointer dereference... 7.5 High -
gnutls28Ubuntu GnuTLS 3.6.x before 3.6.14 uses incorrect cryptography for encrypting a session ticket (a loss of... 7.4 High -
gnutls28Ubuntu gnutls28 update No score -
gnutls28Ubuntu gnutls28 update No score -
gnutls28Ubuntu A vulnerability was found in gnutls versions from 3.5.8 before 3.6.7. A memory corruption (double... 5.3 Medium -
gnutls28Ubuntu A Bleichenbacher type side-channel based padding oracle attack was found in the way gnutls... 4.7 Medium -
gnutls28Ubuntu A cache-based side channel in GnuTLS implementation that leads to plain text recovery in cross-VM... 5.3 Medium -
gnutls28Ubuntu It was found that the GnuTLS implementation of HMAC-SHA-384 was vulnerable to a Lucky thirteen... 5.9 Medium -
gnutls28Ubuntu It was found that the GnuTLS implementation of HMAC-SHA-256 was vulnerable to a Lucky thirteen... 5.9 Medium -
gnutls28Ubuntu GnuTLS version 3.5.12 and earlier is vulnerable to a NULL pointer dereference while decoding a... 7.5 High -
gnutls28Ubuntu GnuTLS before 2017-02-20 has an out-of-bounds write caused by an integer overflow and heap-based... 7.5 High -
gnutls28Ubuntu Multiple heap-based buffer overflows in the read_attribute function in GnuTLS before 3.3.26 and 3... 9.8 Critical -
gnutls28Ubuntu Stack-based buffer overflow in the cdk_pk_get_keyid function in lib/opencdk/pubkey.c in GnuTLS... 9.8 Critical -
gnutls28Ubuntu The stream reading functions in lib/opencdk/read-packet.c in GnuTLS before 3.3.26 and 3.5.x... 7.5 High - Show olderLoading…