Red Hat Security AdvisoryRHSA-2008:0492
gnutls security update
Released 2008-05-20 · Red Hat rating Important · View on Red Hat →
Fixed in
- Red Hat Enterprise Linux AS version 4 gnutls-1.0.20-4.el4_6, gnutls-1.0.20-4.el4_6.i386, gnutls-1.0.20-4.el4_6.ia64 +5
- Red Hat Enterprise Linux Desktop version 4 gnutls-1.0.20-4.el4_6, gnutls-1.0.20-4.el4_6.i386, gnutls-devel-1.0.20-4.el4_6 +1
- Red Hat Enterprise Linux ES version 4 gnutls-1.0.20-4.el4_6, gnutls-1.0.20-4.el4_6.i386, gnutls-1.0.20-4.el4_6.ia64 +3
- Red Hat Enterprise Linux WS version 4 gnutls-1.0.20-4.el4_6, gnutls-1.0.20-4.el4_6.i386, gnutls-1.0.20-4.el4_6.ia64 +3
Fixes 3 records
Priority MEDIUM 57
The _gnutls_server_name_recv_params function in lib/ext_server_name.c in libgnutls in gnutls-serv in GnuTLS before 2.2.4 does not properly calculate the number of Server Names in a TLS 1.0 Client Hello message during ext…
CVSS 2.0HIGH 10.0· Network · No auth · Interaction — · EPSS 0.12018 · Published 2008-05-21 · Fixed CWE-189
Priority MEDIUM 49
The _gnutls_recv_client_kx_message function in lib/gnutls_kx.c in libgnutls in gnutls-serv in GnuTLS before 2.2.4 continues to process Client Hello messages within a TLS message after one has already been processed, whic…
CVSS 2.0HIGH 9.3· Network · No auth · Interaction — · EPSS 0.05772 · Published 2008-05-21 · Fixed CWE-287
Priority LOW 31
Integer signedness error in the _gnutls_ciphertext2compressed function in lib/gnutls_cipher.c in libgnutls in GnuTLS before 2.2.4 allows remote attackers to cause a denial of service (buffer over-read and crash) via a ce…
CVSS 2.0MEDIUM 5.0· Network · No auth · Interaction — · EPSS 0.04954 · Published 2008-05-21 · Fixed CWE-189
THREATIST.IORead the docs