CVE-2014-3465

Опубликовано: 10 июн. 2014

Источник: nvd

CVSS2: 5

EPSS Низкий

Описание

The gnutls_x509_dn_oid_name function in lib/x509/common.c in GnuTLS 3.0 before 3.1.20 and 3.2.x before 3.2.10 allows remote attackers to cause a denial of service (NULL pointer dereference) via a crafted X.509 certificate, related to a missing LDAP description for an OID when printing the DN.

Комментарий

Per http://cwe.mitre.org/data/definitions/476.html "CWE-476: NULL Pointer Dereference"

Ссылки

Уязвимые конфигурации

Конфигурация 1

Одно из

cpe:2.3:a:gnu:gnutls:3.0.0:*:*:*:*:*:*:*

cpe:2.3:a:gnu:gnutls:3.0.1:*:*:*:*:*:*:*

cpe:2.3:a:gnu:gnutls:3.0.2:*:*:*:*:*:*:*

cpe:2.3:a:gnu:gnutls:3.0.3:*:*:*:*:*:*:*

cpe:2.3:a:gnu:gnutls:3.0.4:*:*:*:*:*:*:*

cpe:2.3:a:gnu:gnutls:3.0.5:*:*:*:*:*:*:*

cpe:2.3:a:gnu:gnutls:3.0.6:*:*:*:*:*:*:*

cpe:2.3:a:gnu:gnutls:3.0.7:*:*:*:*:*:*:*

cpe:2.3:a:gnu:gnutls:3.0.8:*:*:*:*:*:*:*

cpe:2.3:a:gnu:gnutls:3.0.9:*:*:*:*:*:*:*

cpe:2.3:a:gnu:gnutls:3.0.10:*:*:*:*:*:*:*

cpe:2.3:a:gnu:gnutls:3.0.11:*:*:*:*:*:*:*

cpe:2.3:a:gnu:gnutls:3.0.12:*:*:*:*:*:*:*

cpe:2.3:a:gnu:gnutls:3.0.13:*:*:*:*:*:*:*

cpe:2.3:a:gnu:gnutls:3.0.14:*:*:*:*:*:*:*

cpe:2.3:a:gnu:gnutls:3.0.15:*:*:*:*:*:*:*

cpe:2.3:a:gnu:gnutls:3.0.16:*:*:*:*:*:*:*

cpe:2.3:a:gnu:gnutls:3.0.17:*:*:*:*:*:*:*

cpe:2.3:a:gnu:gnutls:3.0.18:*:*:*:*:*:*:*

cpe:2.3:a:gnu:gnutls:3.0.19:*:*:*:*:*:*:*

cpe:2.3:a:gnu:gnutls:3.0.20:*:*:*:*:*:*:*

cpe:2.3:a:gnu:gnutls:3.0.21:*:*:*:*:*:*:*

cpe:2.3:a:gnu:gnutls:3.0.22:*:*:*:*:*:*:*

cpe:2.3:a:gnu:gnutls:3.0.23:*:*:*:*:*:*:*

cpe:2.3:a:gnu:gnutls:3.0.24:*:*:*:*:*:*:*

cpe:2.3:a:gnu:gnutls:3.0.25:*:*:*:*:*:*:*

cpe:2.3:a:gnu:gnutls:3.0.26:*:*:*:*:*:*:*

cpe:2.3:a:gnu:gnutls:3.0.27:*:*:*:*:*:*:*

cpe:2.3:a:gnu:gnutls:3.0.28:*:*:*:*:*:*:*

cpe:2.3:a:gnu:gnutls:3.1.0:*:*:*:*:*:*:*

cpe:2.3:a:gnu:gnutls:3.1.1:*:*:*:*:*:*:*

cpe:2.3:a:gnu:gnutls:3.1.2:*:*:*:*:*:*:*

cpe:2.3:a:gnu:gnutls:3.1.3:*:*:*:*:*:*:*

cpe:2.3:a:gnu:gnutls:3.1.4:*:*:*:*:*:*:*

cpe:2.3:a:gnu:gnutls:3.1.5:*:*:*:*:*:*:*

cpe:2.3:a:gnu:gnutls:3.1.6:*:*:*:*:*:*:*

cpe:2.3:a:gnu:gnutls:3.1.7:*:*:*:*:*:*:*

cpe:2.3:a:gnu:gnutls:3.1.8:*:*:*:*:*:*:*

cpe:2.3:a:gnu:gnutls:3.1.9:*:*:*:*:*:*:*

cpe:2.3:a:gnu:gnutls:3.1.10:*:*:*:*:*:*:*

cpe:2.3:a:gnu:gnutls:3.1.11:*:*:*:*:*:*:*

cpe:2.3:a:gnu:gnutls:3.1.12:*:*:*:*:*:*:*

cpe:2.3:a:gnu:gnutls:3.1.13:*:*:*:*:*:*:*

cpe:2.3:a:gnu:gnutls:3.1.14:*:*:*:*:*:*:*

cpe:2.3:a:gnu:gnutls:3.1.15:*:*:*:*:*:*:*

cpe:2.3:a:gnu:gnutls:3.1.16:*:*:*:*:*:*:*

cpe:2.3:a:gnu:gnutls:3.1.17:*:*:*:*:*:*:*

cpe:2.3:a:gnu:gnutls:3.1.18:*:*:*:*:*:*:*

cpe:2.3:a:gnu:gnutls:3.1.19:*:*:*:*:*:*:*

cpe:2.3:a:gnu:gnutls:3.2.0:*:*:*:*:*:*:*

cpe:2.3:a:gnu:gnutls:3.2.1:*:*:*:*:*:*:*

cpe:2.3:a:gnu:gnutls:3.2.2:*:*:*:*:*:*:*

cpe:2.3:a:gnu:gnutls:3.2.3:*:*:*:*:*:*:*

cpe:2.3:a:gnu:gnutls:3.2.4:*:*:*:*:*:*:*

cpe:2.3:a:gnu:gnutls:3.2.5:*:*:*:*:*:*:*

cpe:2.3:a:gnu:gnutls:3.2.6:*:*:*:*:*:*:*

cpe:2.3:a:gnu:gnutls:3.2.7:*:*:*:*:*:*:*

cpe:2.3:a:gnu:gnutls:3.2.8:*:*:*:*:*:*:*

cpe:2.3:a:gnu:gnutls:3.2.8.1:*:*:*:*:*:*:*

cpe:2.3:a:gnu:gnutls:3.2.9:*:*:*:*:*:*:*

EPSS

Процентиль: 72%

0.00736

Низкий

5 Medium

CVSS2

Дефекты

NVD-CWE-Other

Связанные уязвимости

CVE-2014-3465

ubuntu

около 11 лет назад

CVE-2014-3465

redhat

больше 11 лет назад

CVE-2014-3465

debian

около 11 лет назад

The gnutls_x509_dn_oid_name function in lib/x509/common.c in GnuTLS 3. ...

GHSA-g8hv-44v8-257w

github

больше 3 лет назад

ELSA-2014-0684

oracle-oval

около 11 лет назад

ELSA-2014-0684: gnutls security update (IMPORTANT)

EPSS

Процентиль: 72%

0.00736

Низкий

5 Medium

CVSS2

Дефекты

NVD-CWE-Other