Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

nvd логотип

CVE-2014-3466

Опубликовано: 03 июн. 2014
Источник: nvd
CVSS2: 6.8
EPSS Средний

Описание

Buffer overflow in the read_server_hello function in lib/gnutls_handshake.c in GnuTLS before 3.1.25, 3.2.x before 3.2.15, and 3.3.x before 3.3.4 allows remote servers to cause a denial of service (memory corruption) or possibly execute arbitrary code via a long session id in a ServerHello message.

Ссылки

Уязвимые конфигурации

Конфигурация 1

Одно из

cpe:2.3:a:gnu:gnutls:3.3.0:-:*:*:*:*:*:*
cpe:2.3:a:gnu:gnutls:3.3.0:pre0:*:*:*:*:*:*
cpe:2.3:a:gnu:gnutls:3.3.1:*:*:*:*:*:*:*
cpe:2.3:a:gnu:gnutls:3.3.2:*:*:*:*:*:*:*
cpe:2.3:a:gnu:gnutls:3.3.3:*:*:*:*:*:*:*
Конфигурация 2

Одно из

cpe:2.3:a:gnu:gnutls:*:*:*:*:*:*:*:*
Версия до 3.1.24 (включая)
cpe:2.3:a:gnu:gnutls:3.1.0:*:*:*:*:*:*:*
cpe:2.3:a:gnu:gnutls:3.1.1:*:*:*:*:*:*:*
cpe:2.3:a:gnu:gnutls:3.1.2:*:*:*:*:*:*:*
cpe:2.3:a:gnu:gnutls:3.1.3:*:*:*:*:*:*:*
cpe:2.3:a:gnu:gnutls:3.1.4:*:*:*:*:*:*:*
cpe:2.3:a:gnu:gnutls:3.1.5:*:*:*:*:*:*:*
cpe:2.3:a:gnu:gnutls:3.1.6:*:*:*:*:*:*:*
cpe:2.3:a:gnu:gnutls:3.1.7:*:*:*:*:*:*:*
cpe:2.3:a:gnu:gnutls:3.1.8:*:*:*:*:*:*:*
cpe:2.3:a:gnu:gnutls:3.1.9:*:*:*:*:*:*:*
cpe:2.3:a:gnu:gnutls:3.1.10:*:*:*:*:*:*:*
cpe:2.3:a:gnu:gnutls:3.1.11:*:*:*:*:*:*:*
cpe:2.3:a:gnu:gnutls:3.1.12:*:*:*:*:*:*:*
cpe:2.3:a:gnu:gnutls:3.1.13:*:*:*:*:*:*:*
cpe:2.3:a:gnu:gnutls:3.1.14:*:*:*:*:*:*:*
cpe:2.3:a:gnu:gnutls:3.1.15:*:*:*:*:*:*:*
cpe:2.3:a:gnu:gnutls:3.1.16:*:*:*:*:*:*:*
cpe:2.3:a:gnu:gnutls:3.1.17:*:*:*:*:*:*:*
cpe:2.3:a:gnu:gnutls:3.1.18:*:*:*:*:*:*:*
cpe:2.3:a:gnu:gnutls:3.1.19:*:*:*:*:*:*:*
cpe:2.3:a:gnu:gnutls:3.1.20:*:*:*:*:*:*:*
cpe:2.3:a:gnu:gnutls:3.1.21:*:*:*:*:*:*:*
cpe:2.3:a:gnu:gnutls:3.1.22:*:*:*:*:*:*:*
cpe:2.3:a:gnu:gnutls:3.1.23:*:*:*:*:*:*:*
Конфигурация 3

Одно из

cpe:2.3:a:gnu:gnutls:3.2.0:*:*:*:*:*:*:*
cpe:2.3:a:gnu:gnutls:3.2.1:*:*:*:*:*:*:*
cpe:2.3:a:gnu:gnutls:3.2.2:*:*:*:*:*:*:*
cpe:2.3:a:gnu:gnutls:3.2.3:*:*:*:*:*:*:*
cpe:2.3:a:gnu:gnutls:3.2.4:*:*:*:*:*:*:*
cpe:2.3:a:gnu:gnutls:3.2.5:*:*:*:*:*:*:*
cpe:2.3:a:gnu:gnutls:3.2.6:*:*:*:*:*:*:*
cpe:2.3:a:gnu:gnutls:3.2.7:*:*:*:*:*:*:*
cpe:2.3:a:gnu:gnutls:3.2.8:*:*:*:*:*:*:*
cpe:2.3:a:gnu:gnutls:3.2.8.1:*:*:*:*:*:*:*
cpe:2.3:a:gnu:gnutls:3.2.9:*:*:*:*:*:*:*
cpe:2.3:a:gnu:gnutls:3.2.10:*:*:*:*:*:*:*
cpe:2.3:a:gnu:gnutls:3.2.11:*:*:*:*:*:*:*
cpe:2.3:a:gnu:gnutls:3.2.12:*:*:*:*:*:*:*
cpe:2.3:a:gnu:gnutls:3.2.12.1:*:*:*:*:*:*:*
cpe:2.3:a:gnu:gnutls:3.2.13:*:*:*:*:*:*:*
cpe:2.3:a:gnu:gnutls:3.2.14:*:*:*:*:*:*:*

EPSS

Процентиль: 96%
0.23263
Средний

6.8 Medium

CVSS2

Дефекты

CWE-119

Связанные уязвимости

ubuntu логотип

CVE-2014-3466

ubuntu
около 11 лет назад

Buffer overflow in the read_server_hello function in lib/gnutls_handshake.c in GnuTLS before 3.1.25, 3.2.x before 3.2.15, and 3.3.x before 3.3.4 allows remote servers to cause a denial of service (memory corruption) or possibly execute arbitrary code via a long session id in a ServerHello message.

redhat логотип

CVE-2014-3466

redhat
около 11 лет назад

Buffer overflow in the read_server_hello function in lib/gnutls_handshake.c in GnuTLS before 3.1.25, 3.2.x before 3.2.15, and 3.3.x before 3.3.4 allows remote servers to cause a denial of service (memory corruption) or possibly execute arbitrary code via a long session id in a ServerHello message.

debian логотип

CVE-2014-3466

debian
около 11 лет назад

Buffer overflow in the read_server_hello function in lib/gnutls_handsh ...

github логотип

GHSA-cc2g-hj2r-x228

github
около 3 лет назад

Buffer overflow in the read_server_hello function in lib/gnutls_handshake.c in GnuTLS before 3.1.25, 3.2.x before 3.2.15, and 3.3.x before 3.3.4 allows remote servers to cause a denial of service (memory corruption) or possibly execute arbitrary code via a long session id in a ServerHello message.

oracle-oval логотип

ELSA-2014-0595

oracle-oval
около 11 лет назад

ELSA-2014-0595: gnutls security update (IMPORTANT)

EPSS

Процентиль: 96%
0.23263
Средний

6.8 Medium

CVSS2

Дефекты

CWE-119
Уязвимость CVE-2014-3466