Skip to contentGnu Gnutls vulnerabilities
- gnu gnutlsBuffer overflow in the dane_query_tlsa function in the DANE library (libdane) in GnuTLS 3.1.x...CVE-2013-4466Fix available5.0 Medium
- gnu gnutlsThe _gnutls_ciphertext2compressed function in lib/gnutls_cipher.c in GnuTLS 2.12.23 allows remote...CVE-2013-2116Fix available5.0 Medium
- gnu gnutlsThe TLS implementation in GnuTLS before 2.12.23, 3.0.x before 3.0.28, and 3.1.x before 3.1.7 does...CVE-2013-1619Fix available4.0 Medium
- gnu gnutlsgnutls_cipher.c in libgnutls in GnuTLS before 2.12.17 and 3.x before 3.0.15 does not properly...CVE-2012-1573Fix available5.0 Medium
- gnu gnutls, libtasn1 +1 moreThe asn1_get_length_der function in decoding.c in GNU Libtasn1 before 2.12, as used in GnuTLS...CVE-2012-1569Fix available5.0 Medium
- gnu gnutlsDouble free vulnerability in libgnutls in GnuTLS before 3.0.14 allows remote attackers to cause a...CVE-2012-1663Public exploitFix available7.5 High
- gnu gnutlsThe DTLS implementation in GnuTLS 3.0.10 and earlier executes certain error-handling code only if...CVE-2012-0390Fix available4.3 Medium
- gnu gnutlsBuffer overflow in the gnutls_session_get_data function in lib/gnutls_session.c in GnuTLS 2.12.x...CVE-2011-41284.3 Medium
- gnu gnutlsThe _gnutls_x509_oid2mac_algorithm function in lib/gnutls_algorithms.c in GnuTLS before 1.4.2...CVE-2006-7239Fix available5.0 Medium
- gnu gnutlsThe gnutls_x509_crt_get_serial function in the GnuTLS library before 1.2.1, when running on big...CVE-2010-07317.5 High
- apache http server, gnu gnutls, mozilla nss +5 more +7 moreApache Tomcat affected by vulnerability in TLS and SSL protocolCVE-2009-3555Public exploitFix availableEPSS 87.3%5.8 Medium
- gnu gnutlslibgnutls in GnuTLS before 2.8.2 does not properly handle a '\0' character in a domain name in...CVE-2009-2730Fix available7.5 High
- gnu gnutls, mozilla network security services, openssl +2 moreThe Network Security Services (NSS) library before 3.12.3, as used in Firefox; GnuTLS before 2.6...CVE-2009-2409Fix available5.1 Medium
- gnu gnutlsgnutls-cli in GnuTLS before 2.6.6 does not verify the activation and expiration times of X.509...CVE-2009-14175.0 Medium
- gnu gnutlslib/gnutls_pk.c in libgnutls in GnuTLS 2.5.0 through 2.6.5 generates RSA keys stored in DSA...CVE-2009-1416Public exploit7.5 High
- gnu gnutlslib/pk-libgcrypt.c in libgnutls in GnuTLS before 2.6.6 does not properly handle invalid DSA...CVE-2009-1415Public exploit4.3 Medium
- gnu gnutls, canonical ubuntu linux, debian linux +4 more +6 moreThe _gnutls_x509_verify_certificate function in lib/x509/verify.c in libgnutls in GnuTLS before 2...CVE-2008-4989Fix available5.9 Medium
- gnu gnutlsUse-after-free vulnerability in the _gnutls_handshake_hash_buffers_clear function in lib...CVE-2008-23777.6 High
- gnu gnutlsInteger signedness error in the _gnutls_ciphertext2compressed function in lib/gnutls_cipher.c in...CVE-2008-19505.0 Medium
- gnu gnutlsThe _gnutls_recv_client_kx_message function in lib/gnutls_kx.c in libgnutls in gnutls-serv in...CVE-2008-19499.3 High
- gnu gnutlsThe _gnutls_server_name_recv_params function in lib/ext_server_name.c in libgnutls in gnutls-serv...CVE-2008-1948EPSS 12.0%10.0 High
- gnu gnutlsverify.c in GnuTLS before 1.4.4, when using an RSA key with exponent 3, does not properly handle...CVE-2006-4790Fix available5.0 Medium
- gnu gnutlsThe "record packet parsing" in GnuTLS 1.2 before 1.2.3 and 1.0 before 1.0.25 allows remote...CVE-2005-1431Fix available5.0 Medium
- gnu gnutlsX.509 Certificate Signature Verification in Gnu transport layer security library (GnuTLS) 1.0.16...CVE-2004-25317.8 High