Red Hat Security AdvisoryRHSA-2014:1846
gnutls security update
Released 2014-11-12 · Red Hat rating Moderate · View on Red Hat →
Fixed in
- Red Hat Enterprise Linux Client (v. 7) gnutls-3.1.18-10.el7_0, gnutls-dane-3.1.18-10.el7_0, gnutls-utils-3.1.18-10.el7_0
- Red Hat Enterprise Linux Client Optional (v. 7) gnutls-c++-3.1.18-10.el7_0, gnutls-devel-3.1.18-10.el7_0
- Red Hat Enterprise Linux ComputeNode (v. 7) gnutls-3.1.18-10.el7_0, gnutls-dane-3.1.18-10.el7_0, gnutls-utils-3.1.18-10.el7_0
- Red Hat Enterprise Linux ComputeNode Optional (v. 7) gnutls-c++-3.1.18-10.el7_0, gnutls-devel-3.1.18-10.el7_0
- Red Hat Enterprise Linux Server (v. 7) gnutls-3.1.18-10.el7_0, gnutls-3.1.18-10.el7_0.ppc, gnutls-c++-3.1.18-10.el7_0 +6
- Red Hat Enterprise Linux Workstation (v. 7) gnutls-3.1.18-10.el7_0, gnutls-c++-3.1.18-10.el7_0, gnutls-dane-3.1.18-10.el7_0 +2
Fixes 1 record
Priority LOW 29
The _gnutls_ecc_ansi_x963_export function in gnutls_ecc.c in GnuTLS 3.x before 3.1.28, 3.2.x before 3.2.20, and 3.3.x before 3.3.10 allows remote attackers to cause a denial of service (out-of-bounds write) via a crafted…
CVSS 2.0MEDIUM 5.0· Network · No auth · Interaction — · EPSS 0.03308 · Published 2014-11-13 · Fixed CWE-310
