PT-2015-1926 · Gnu+1 · Gnutls+1

Kurt Roeckx · Publicado 2015-08-12 · Atualizado 2024-06-15 · CVE-2015-6251

Positive Technologies (AI Summary)

CVSS v2.0

5.0

Média

Vetor base

AV:N/AC:L/Au:N/C:N/I:N/A:P

Name of the Vulnerable Software and Affected Versions GnuTLS versions prior to 3.3.17 GnuTLS versions 3.4.x prior to 3.4.4

Description The issue is related to a double free vulnerability that can be exploited by remote attackers to cause a denial of service. This can be achieved by providing a long DistinguishedName (DN) entry in a certificate. The vulnerability is associated with an error in memory management, specifically a double free error, which can lead to a denial of service.

Recommendations For GnuTLS versions prior to 3.3.17, update to version 3.3.17 or later. For GnuTLS versions 3.4.x prior to 3.4.4, update to version 3.4.4 or later.

Correção

Double Free

Enumeração de Fraquezas

CWE-415

Identificadores relacionados

BDU:2015-11272

CVE-2015-6251

DSA-3334-1

MGASA-2015-0322

OPENSUSE-SU-2024:10105-1

SUSE-SU-2015:1518-1

USN-2727-1

Produtos afetados

Gnutls

Suse

Referências · 46

• https://suse.com/security/cve/CVE-2014-3466 · Nota
• https://osv.dev/vulnerability/MGASA-2015-0322 · Aviso do Fabricante
• https://osv.dev/vulnerability/openSUSE-SU-2024:10105-1 · Aviso do Fabricante
• https://security-tracker.debian.org/tracker/CVE-2015-6251 · Aviso do Fabricante
• https://advisories.mageia.org/MGASA-2015-0322.html · Nota de Segurança
• https://osv.dev/vulnerability/DEBIAN-CVE-2015-6251 · Aviso do Fabricante
• https://suse.com/security/cve/CVE-2012-0390 · Nota
• https://suse.com/security/cve/CVE-2015-6251 · Nota
• https://suse.com/security/cve/CVE-2014-1959 · Nota
• https://osv.dev/vulnerability/CVE-2015-6251 · Aviso do Fabricante
• https://suse.com/security/cve/CVE-2012-1569 · Nota
• https://osv.dev/vulnerability/SUSE-SU-2015:1518-1 · Aviso do Fabricante
• http://debian.org/security/2015/dsa-3334 · Aviso do Fabricante
• https://ubuntu.com/security/notices/USN-2727-1 · Aviso do Fabricante
• https://cve.org/CVERecord?id=CVE-2015-6251 · Nota de Segurança