Red Hat Security AdvisoryRHSA-2013:0883
gnutls security update
Released 2013-05-30 · Red Hat rating Important · View on Red Hat →
Fixed in
- Red Hat Enterprise Linux (v. 5 server) gnutls-1.4.1-10.el5_9.2, gnutls-1.4.1-10.el5_9.2.i386, gnutls-1.4.1-10.el5_9.2.ia64 +9
- Red Hat Enterprise Linux Desktop (v. 6) gnutls-2.8.5-10.el6_4.2, gnutls-utils-2.8.5-10.el6_4.2
- Red Hat Enterprise Linux Desktop Optional (v. 6) gnutls-2.8.5-10.el6_4.2, gnutls-devel-2.8.5-10.el6_4.2, gnutls-guile-2.8.5-10.el6_4.2
- Red Hat Enterprise Linux HPC Node (v. 6) gnutls-2.8.5-10.el6_4.2, gnutls-utils-2.8.5-10.el6_4.2
- Red Hat Enterprise Linux HPC Node Optional (v. 6) gnutls-2.8.5-10.el6_4.2, gnutls-devel-2.8.5-10.el6_4.2, gnutls-guile-2.8.5-10.el6_4.2
- Red Hat Enterprise Linux Server (v. 6) gnutls-2.8.5-10.el6_4.2, gnutls-2.8.5-10.el6_4.2.ppc, gnutls-devel-2.8.5-10.el6_4.2 +2
- Red Hat Enterprise Linux Server Optional (v. 6) gnutls-2.8.5-10.el6_4.2, gnutls-guile-2.8.5-10.el6_4.2, gnutls-guile-2.8.5-10.el6_4.2.ppc
- Red Hat Enterprise Linux Workstation (v. 6) gnutls-2.8.5-10.el6_4.2, gnutls-devel-2.8.5-10.el6_4.2, gnutls-utils-2.8.5-10.el6_4.2
- Red Hat Enterprise Linux Workstation Optional (v. 6) gnutls-2.8.5-10.el6_4.2, gnutls-guile-2.8.5-10.el6_4.2
Fixes 1 record
Priority LOW 29
The _gnutls_ciphertext2compressed function in lib/gnutls_cipher.c in GnuTLS 2.12.23 allows remote attackers to cause a denial of service (buffer over-read and crash) via a crafted padding length.
CVSS 2.0MEDIUM 5.0· Network · No auth · Interaction — · EPSS 0.03761 · Published 2013-07-03 · Fixed CWE-20
