Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-qx46-76qj-r7r3

Опубликовано: 14 мая 2022
Источник: github
Github: Не прошло ревью

Описание

GnuTLS before 3.1.0 does not verify that the RSA PKCS #1 signature algorithm matches the signature algorithm in the certificate, which allows remote attackers to conduct downgrade attacks via unspecified vectors.

GnuTLS before 3.1.0 does not verify that the RSA PKCS #1 signature algorithm matches the signature algorithm in the certificate, which allows remote attackers to conduct downgrade attacks via unspecified vectors.

EPSS

Процентиль: 50%
0.00271
Низкий

Связанные уязвимости

ubuntu
больше 10 лет назад

GnuTLS before 3.1.0 does not verify that the RSA PKCS #1 signature algorithm matches the signature algorithm in the certificate, which allows remote attackers to conduct downgrade attacks via unspecified vectors.

redhat
больше 10 лет назад

GnuTLS before 3.1.0 does not verify that the RSA PKCS #1 signature algorithm matches the signature algorithm in the certificate, which allows remote attackers to conduct downgrade attacks via unspecified vectors.

nvd
больше 10 лет назад

GnuTLS before 3.1.0 does not verify that the RSA PKCS #1 signature algorithm matches the signature algorithm in the certificate, which allows remote attackers to conduct downgrade attacks via unspecified vectors.

debian
больше 10 лет назад

GnuTLS before 3.1.0 does not verify that the RSA PKCS #1 signature alg ...

oracle-oval
больше 10 лет назад

ELSA-2015-1457: gnutls security and bug fix update (MODERATE)

EPSS

Процентиль: 50%
0.00271
Низкий