Red Hat Security AdvisoryRHSA-2014:0595
gnutls security update
Released 2014-06-03 · Red Hat rating Important · View on Red Hat →
Fixed in
- Red Hat Enterprise Linux Desktop (v. 6) gnutls-2.8.5-14.el6_5, gnutls-utils-2.8.5-14.el6_5
- Red Hat Enterprise Linux Desktop Optional (v. 6) gnutls-2.8.5-14.el6_5, gnutls-devel-2.8.5-14.el6_5, gnutls-guile-2.8.5-14.el6_5
- Red Hat Enterprise Linux HPC Node (v. 6) gnutls-2.8.5-14.el6_5, gnutls-utils-2.8.5-14.el6_5
- Red Hat Enterprise Linux HPC Node Optional (v. 6) gnutls-2.8.5-14.el6_5, gnutls-devel-2.8.5-14.el6_5, gnutls-guile-2.8.5-14.el6_5
- Red Hat Enterprise Linux Server (v. 6) gnutls-2.8.5-14.el6_5, gnutls-2.8.5-14.el6_5.ppc, gnutls-devel-2.8.5-14.el6_5 +2
- Red Hat Enterprise Linux Server Optional (v. 6) gnutls-2.8.5-14.el6_5, gnutls-guile-2.8.5-14.el6_5, gnutls-guile-2.8.5-14.el6_5.ppc
- Red Hat Enterprise Linux Workstation (v. 6) gnutls-2.8.5-14.el6_5, gnutls-devel-2.8.5-14.el6_5, gnutls-utils-2.8.5-14.el6_5
- Red Hat Enterprise Linux Workstation Optional (v. 6) gnutls-2.8.5-14.el6_5, gnutls-guile-2.8.5-14.el6_5
Fixes 1 record
Priority MEDIUM 43
Buffer overflow in the read_server_hello function in lib/gnutls_handshake.c in GnuTLS before 3.1.25, 3.2.x before 3.2.15, and 3.3.x before 3.3.4 allows remote servers to cause a denial of service (memory corruption) or p…
CVSS 2.0MEDIUM 6.8· Network · No auth · Interaction — · EPSS 0.11221 · Published 2014-06-03 · Partial fix CWE-119
