Поиск уязвимостей
Количество 50
Количество 50
ELSA-2024-1879
ELSA-2024-1879: gnutls security update (MODERATE)
ELSA-2024-12364
ELSA-2024-12364: gnutls security update (MODERATE)
SUSE-SU-2024:0860-1
Security update for gnutls
ROS-20241211-10
Уязвимость gnutls
CVE-2024-0567
A vulnerability was found in GnuTLS, where a cockpit (which uses gnuTLS) rejects a certificate chain with distributed trust. This issue occurs when validating a certificate chain with cockpit-certificate-ensure. This flaw allows an unauthenticated, remote client or attacker to initiate a denial of service attack.
CVE-2024-0567
A vulnerability was found in GnuTLS, where a cockpit (which uses gnuTLS) rejects a certificate chain with distributed trust. This issue occurs when validating a certificate chain with cockpit-certificate-ensure. This flaw allows an unauthenticated, remote client or attacker to initiate a denial of service attack.
CVE-2024-0567
A vulnerability was found in GnuTLS, where a cockpit (which uses gnuTLS) rejects a certificate chain with distributed trust. This issue occurs when validating a certificate chain with cockpit-certificate-ensure. This flaw allows an unauthenticated, remote client or attacker to initiate a denial of service attack.
CVE-2024-0567
Gnutls: rejects certificate chain with distributed trust
CVE-2024-0567
A vulnerability was found in GnuTLS, where a cockpit (which uses gnuTL ...
ALT-PU-2024-4634
ALT-PU-2024-4634: package `gnutls30` update to version 3.8.4-alt1
GHSA-mcx8-9rrj-7qxm
A vulnerability was found in GnuTLS, where a cockpit (which uses gnuTLS) rejects a certificate chain with distributed trust. This issue occurs when validating a certificate chain with cockpit-certificate-ensure. This flaw allows an unauthenticated, remote client or attacker to initiate a denial of service attack.
BDU:2024-00705
Уязвимость криптографической библиотеки GnuTLS, связанная с ошибками проверки криптографической подписи, позволяющая нарушителю вызвать отказ в обслуживании
ROS-20240409-15
Уязвимость gnutls
CVE-2024-28835
A flaw has been discovered in GnuTLS where an application crash can be induced when attempting to verify a specially crafted .pem bundle using the "certtool --verify-chain" command.
CVE-2024-28835
A flaw has been discovered in GnuTLS where an application crash can be induced when attempting to verify a specially crafted .pem bundle using the "certtool --verify-chain" command.
CVE-2024-28835
A flaw has been discovered in GnuTLS where an application crash can be induced when attempting to verify a specially crafted .pem bundle using the "certtool --verify-chain" command.
CVE-2024-28835
CVE-2024-28835
A flaw has been discovered in GnuTLS where an application crash can be ...
CVE-2024-28834
A flaw was found in GnuTLS. The Minerva attack is a cryptographic vulnerability that exploits deterministic behavior in systems like GnuTLS, leading to side-channel leaks. In specific scenarios, such as when using the GNUTLS_PRIVKEY_FLAG_REPRODUCIBLE flag, it can result in a noticeable step in nonce size from 513 to 512 bits, exposing a potential timing side-channel.
CVE-2024-28834
A flaw was found in GnuTLS. The Minerva attack is a cryptographic vulnerability that exploits deterministic behavior in systems like GnuTLS, leading to side-channel leaks. In specific scenarios, such as when using the GNUTLS_PRIVKEY_FLAG_REPRODUCIBLE flag, it can result in a noticeable step in nonce size from 513 to 512 bits, exposing a potential timing side-channel.
Уязвимостей на страницу
Уязвимость | CVSS | EPSS | Опубликовано | |
|---|---|---|---|---|
| ELSA-2024-1879 ELSA-2024-1879: gnutls security update (MODERATE) | больше 2 лет назад | ||
| ELSA-2024-12364 ELSA-2024-12364: gnutls security update (MODERATE) | больше 2 лет назад | ||
 | SUSE-SU-2024:0860-1 Security update for gnutls | больше 2 лет назад | ||
 | ROS-20241211-10 Уязвимость gnutls | CVSS3: 7.5 | 2% Низкий | почти 2 года назад |
 | CVE-2024-0567 A vulnerability was found in GnuTLS, where a cockpit (which uses gnuTLS) rejects a certificate chain with distributed trust. This issue occurs when validating a certificate chain with cockpit-certificate-ensure. This flaw allows an unauthenticated, remote client or attacker to initiate a denial of service attack. | CVSS3: 7.5 | 1% Низкий | почти 3 года назад |
 | CVE-2024-0567 A vulnerability was found in GnuTLS, where a cockpit (which uses gnuTLS) rejects a certificate chain with distributed trust. This issue occurs when validating a certificate chain with cockpit-certificate-ensure. This flaw allows an unauthenticated, remote client or attacker to initiate a denial of service attack. | CVSS3: 7.5 | 1% Низкий | почти 3 года назад |
 | CVE-2024-0567 A vulnerability was found in GnuTLS, where a cockpit (which uses gnuTLS) rejects a certificate chain with distributed trust. This issue occurs when validating a certificate chain with cockpit-certificate-ensure. This flaw allows an unauthenticated, remote client or attacker to initiate a denial of service attack. | CVSS3: 7.5 | 1% Низкий | почти 3 года назад |
 | CVE-2024-0567 Gnutls: rejects certificate chain with distributed trust | CVSS3: 7.5 | 1% Низкий | 9 месяцев назад |
| CVE-2024-0567 A vulnerability was found in GnuTLS, where a cockpit (which uses gnuTL ... | CVSS3: 7.5 | 1% Низкий | почти 3 года назад |
| ALT-PU-2024-4634 ALT-PU-2024-4634: package `gnutls30` update to version 3.8.4-alt1 | CVSS3: 5.3 | больше 2 лет назад | |
| GHSA-mcx8-9rrj-7qxm A vulnerability was found in GnuTLS, where a cockpit (which uses gnuTLS) rejects a certificate chain with distributed trust. This issue occurs when validating a certificate chain with cockpit-certificate-ensure. This flaw allows an unauthenticated, remote client or attacker to initiate a denial of service attack. | CVSS3: 5.9 | 1% Низкий | почти 3 года назад |
 | BDU:2024-00705 Уязвимость криптографической библиотеки GnuTLS, связанная с ошибками проверки криптографической подписи, позволяющая нарушителю вызвать отказ в обслуживании | CVSS3: 7.5 | 1% Низкий | почти 3 года назад |
| ROS-20240409-15 Уязвимость gnutls | CVSS3: 7.5 | 1% Низкий | больше 2 лет назад |
| CVE-2024-28835 A flaw has been discovered in GnuTLS where an application crash can be induced when attempting to verify a specially crafted .pem bundle using the "certtool --verify-chain" command. | CVSS3: 5 | 0% Низкий | больше 2 лет назад |
| CVE-2024-28835 A flaw has been discovered in GnuTLS where an application crash can be induced when attempting to verify a specially crafted .pem bundle using the "certtool --verify-chain" command. | CVSS3: 5 | 0% Низкий | больше 2 лет назад |
| CVE-2024-28835 A flaw has been discovered in GnuTLS where an application crash can be induced when attempting to verify a specially crafted .pem bundle using the "certtool --verify-chain" command. | CVSS3: 5 | 0% Низкий | больше 2 лет назад |
| CVSS3: 5 | 0% Низкий | около 2 лет назад | |
| CVE-2024-28835 A flaw has been discovered in GnuTLS where an application crash can be ... | CVSS3: 5 | 0% Низкий | больше 2 лет назад |
| CVE-2024-28834 A flaw was found in GnuTLS. The Minerva attack is a cryptographic vulnerability that exploits deterministic behavior in systems like GnuTLS, leading to side-channel leaks. In specific scenarios, such as when using the GNUTLS_PRIVKEY_FLAG_REPRODUCIBLE flag, it can result in a noticeable step in nonce size from 513 to 512 bits, exposing a potential timing side-channel. | CVSS3: 5.3 | 1% Низкий | больше 2 лет назад |
| CVE-2024-28834 A flaw was found in GnuTLS. The Minerva attack is a cryptographic vulnerability that exploits deterministic behavior in systems like GnuTLS, leading to side-channel leaks. In specific scenarios, such as when using the GNUTLS_PRIVKEY_FLAG_REPRODUCIBLE flag, it can result in a noticeable step in nonce size from 513 to 512 bits, exposing a potential timing side-channel. | CVSS3: 5.3 | 1% Низкий | больше 2 лет назад |
Уязвимостей на страницу