Red Hat Security AdvisoryRHSA-2014:0684
gnutls security update
Released 2014-06-10 · Red Hat rating Important · View on Red Hat →
Fixed in
- Red Hat Enterprise Linux Client (v. 7) gnutls-3.1.18-9.el7_0, gnutls-dane-3.1.18-9.el7_0, gnutls-utils-3.1.18-9.el7_0
- Red Hat Enterprise Linux Client Optional (v. 7) gnutls-c++-3.1.18-9.el7_0, gnutls-devel-3.1.18-9.el7_0
- Red Hat Enterprise Linux ComputeNode (v. 7) gnutls-3.1.18-9.el7_0, gnutls-dane-3.1.18-9.el7_0, gnutls-utils-3.1.18-9.el7_0
- Red Hat Enterprise Linux ComputeNode Optional (v. 7) gnutls-c++-3.1.18-9.el7_0, gnutls-devel-3.1.18-9.el7_0
- Red Hat Enterprise Linux Server (v. 7) gnutls-3.1.18-9.el7_0, gnutls-3.1.18-9.el7_0.ppc, gnutls-c++-3.1.18-9.el7_0 +6
- Red Hat Enterprise Linux Workstation (v. 7) gnutls-3.1.18-9.el7_0, gnutls-c++-3.1.18-9.el7_0, gnutls-dane-3.1.18-9.el7_0 +2
Fixes 2 records
Priority MEDIUM 43
Buffer overflow in the read_server_hello function in lib/gnutls_handshake.c in GnuTLS before 3.1.25, 3.2.x before 3.2.15, and 3.3.x before 3.3.4 allows remote servers to cause a denial of service (memory corruption) or p…
CVSS 2.0MEDIUM 6.8· Network · No auth · Interaction — · EPSS 0.11221 · Published 2014-06-03 · Partial fix CWE-119
Priority LOW 30
The gnutls_x509_dn_oid_name function in lib/x509/common.c in GnuTLS 3.0 before 3.1.20 and 3.2.x before 3.2.10 allows remote attackers to cause a denial of service (NULL pointer dereference) via a crafted X.509 certificat…
CVSS 2.0MEDIUM 5.0· Network · No auth · Interaction — · EPSS 0.0414 · Published 2014-06-10 · Fixed
