Red Hat Security AdvisoryRHSA-2012:0428
gnutls security update
Released 2012-03-27 · Red Hat rating Important · View on Red Hat →
Fixed in
- RHEL Desktop Workstation (v. 5 client) gnutls-1.4.1-7.el5_8.2, gnutls-devel-1.4.1-7.el5_8.2, gnutls-devel-1.4.1-7.el5_8.2.i386
- Red Hat Enterprise Linux (v. 5 server) gnutls-1.4.1-7.el5_8.2, gnutls-1.4.1-7.el5_8.2.i386, gnutls-1.4.1-7.el5_8.2.ia64 +9
- Red Hat Enterprise Linux Desktop (v. 5 client) gnutls-1.4.1-7.el5_8.2, gnutls-1.4.1-7.el5_8.2.i386, gnutls-utils-1.4.1-7.el5_8.2 +1
Fixes 3 records
Priority LOW 30
gnutls_cipher.c in libgnutls in GnuTLS before 2.12.17 and 3.x before 3.0.15 does not properly handle data encrypted with a block cipher, which allows remote attackers to cause a denial of service (heap memory corruption…
CVSS 2.0MEDIUM 5.0· Network · No auth · Interaction — · EPSS 0.04155 · Published 2012-03-26 · Partial fix CWE-310
Priority LOW 30
The asn1_get_length_der function in decoding.c in GNU Libtasn1 before 2.12, as used in GnuTLS before 3.0.16 and other products, does not properly handle certain large length values, which allows remote attackers to cause…
CVSS 2.0MEDIUM 5.0· Network · No auth · Interaction — · EPSS 0.0441 · Published 2012-03-26 · Partial fix CWE-189
Priority LOW 24
Buffer overflow in the gnutls_session_get_data function in lib/gnutls_session.c in GnuTLS 2.12.x before 2.12.14 and 3.x before 3.0.7, when used on a client that performs nonstandard session resumption, allows remote TLS…
CVSS 2.0MEDIUM 4.3· Network · No auth · Interaction — · EPSS 0.023 · Published 2011-12-08 · Partial fix CWE-119
THREATIST.IORead the docs