GnuTLS X.509 Unknown Hash Algorithm Denial of Service Vulnerability
BID:40568
Info
GnuTLS X.509 Unknown Hash Algorithm Denial of Service Vulnerability
| Bugtraq ID: | 40568 |
| Class: | Failure to Handle Exceptional Conditions |
| CVE: |
CVE-2006-7239 |
| Remote: | Yes |
| Local: | No |
| Published: | Aug 11 2006 12:00AM |
| Updated: | Aug 11 2006 12:00AM |
| Credit: | Simon Josefsson |
| Vulnerable: |
Ubuntu Ubuntu Linux 6.06 LTS sparc Ubuntu Ubuntu Linux 6.06 LTS powerpc Ubuntu Ubuntu Linux 6.06 LTS i386 Ubuntu Ubuntu Linux 6.06 LTS amd64 GNU GnuTLS 1.4 GNU GnuTLS 1.3.4 GNU GnuTLS 1.3.3 GNU GnuTLS 1.3.2 GNU GnuTLS 1.3.1 GNU GnuTLS 1.3 GNU GnuTLS 1.2.10 GNU GnuTLS 1.2.9 GNU GnuTLS 1.2.8 GNU GnuTLS 1.2.7 GNU GnuTLS 1.2.6 GNU GnuTLS 1.2.5 GNU GnuTLS 1.2.4 GNU GnuTLS 1.2.3 GNU GnuTLS 1.2.2 GNU GnuTLS 1.2.1 GNU GnuTLS 1.2 GNU GnuTLS 1.0.25 GNU GnuTLS 1.0.23 GNU GnuTLS 1.0.20 GNU GnuTLS 1.0.17 GNU GnuTLS 1.0.16 GNU GnuTLS 1.0.15 GNU GnuTLS 1.0.14 GNU GnuTLS 1.0.13 GNU GnuTLS 1.0.9 GNU GnuTLS 1.0.8 GNU GnuTLS 1.0.7 GNU GnuTLS 1.0.6 GNU GnuTLS 1.0.5 GNU GnuTLS 1.0.4 GNU GnuTLS 1.0.3 GNU GnuTLS 1.0.2 GNU GnuTLS 1.0.1 GNU GnuTLS 1.0 |
| Not Vulnerable: |
GNU GnuTLS 1.4.2 |
Discussion
GnuTLS X.509 Unknown Hash Algorithm Denial of Service Vulnerability
GnuTLS is prone to a denial-of-service vulnerability because it fails to properly handle exceptional conditions.
Successfully exploiting this issue allows attackers to crash applications using the affected library, denying service to legitimate users.
Versions prior to GnuTLS 1.4.2 are vulnerable.
GnuTLS is prone to a denial-of-service vulnerability because it fails to properly handle exceptional conditions.
Successfully exploiting this issue allows attackers to crash applications using the affected library, denying service to legitimate users.
Versions prior to GnuTLS 1.4.2 are vulnerable.
Exploit / POC
GnuTLS X.509 Unknown Hash Algorithm Denial of Service Vulnerability
Attackers can use standard tools to exploit this issue.
Attackers can use standard tools to exploit this issue.
Solution / Fix
GnuTLS X.509 Unknown Hash Algorithm Denial of Service Vulnerability
Solution:
Updates are available. Please see the references for more information.
Ubuntu Ubuntu Linux 6.06 LTS sparc
Ubuntu Ubuntu Linux 6.06 LTS powerpc
Ubuntu Ubuntu Linux 6.06 LTS i386
Ubuntu Ubuntu Linux 6.06 LTS amd64
Solution:
Updates are available. Please see the references for more information.
Ubuntu Ubuntu Linux 6.06 LTS sparc
-
Ubuntu gnutls-bin_1.2.9-2ubuntu1.8_sparc.deb
http://security.ubuntu.com/ubuntu/pool/universe/g/gnutls12/gnutls-bin_ 1.2.9-2ubuntu1.8_sparc.deb -
Ubuntu libgnutls-dev_1.2.9-2ubuntu1.8_sparc.deb
http://security.ubuntu.com/ubuntu/pool/main/g/gnutls12/libgnutls-dev_1 .2.9-2ubuntu1.8_sparc.deb -
Ubuntu libgnutls12-dbg_1.2.9-2ubuntu1.8_sparc.deb
http://security.ubuntu.com/ubuntu/pool/universe/g/gnutls12/libgnutls12 -dbg_1.2.9-2ubuntu1.8_sparc.deb -
Ubuntu libgnutls12_1.2.9-2ubuntu1.8_sparc.deb
http://security.ubuntu.com/ubuntu/pool/main/g/gnutls12/libgnutls12_1.2 .9-2ubuntu1.8_sparc.deb
Ubuntu Ubuntu Linux 6.06 LTS powerpc
-
Ubuntu gnutls-bin_1.2.9-2ubuntu1.8_powerpc.deb
http://security.ubuntu.com/ubuntu/pool/universe/g/gnutls12/gnutls-bin_ 1.2.9-2ubuntu1.8_powerpc.deb -
Ubuntu libgnutls-dev_1.2.9-2ubuntu1.8_powerpc.deb
http://security.ubuntu.com/ubuntu/pool/main/g/gnutls12/libgnutls-dev_1 .2.9-2ubuntu1.8_powerpc.deb -
Ubuntu libgnutls12-dbg_1.2.9-2ubuntu1.8_powerpc.deb
http://security.ubuntu.com/ubuntu/pool/universe/g/gnutls12/libgnutls12 -dbg_1.2.9-2ubuntu1.8_powerpc.deb -
Ubuntu libgnutls12_1.2.9-2ubuntu1.8_powerpc.deb
http://security.ubuntu.com/ubuntu/pool/main/g/gnutls12/libgnutls12_1.2 .9-2ubuntu1.8_powerpc.deb
Ubuntu Ubuntu Linux 6.06 LTS i386
-
Ubuntu gnutls-bin_1.2.9-2ubuntu1.8_i386.deb
http://security.ubuntu.com/ubuntu/pool/universe/g/gnutls12/gnutls-bin_ 1.2.9-2ubuntu1.8_i386.deb -
Ubuntu libgnutls-dev_1.2.9-2ubuntu1.8_i386.deb
http://security.ubuntu.com/ubuntu/pool/main/g/gnutls12/libgnutls-dev_1 .2.9-2ubuntu1.8_i386.deb -
Ubuntu libgnutls12-dbg_1.2.9-2ubuntu1.8_i386.deb
http://security.ubuntu.com/ubuntu/pool/universe/g/gnutls12/libgnutls12 -dbg_1.2.9-2ubuntu1.8_i386.deb -
Ubuntu libgnutls12_1.2.9-2ubuntu1.8_i386.deb
http://security.ubuntu.com/ubuntu/pool/main/g/gnutls12/libgnutls12_1.2 .9-2ubuntu1.8_i386.deb
Ubuntu Ubuntu Linux 6.06 LTS amd64
-
Ubuntu gnutls-bin_1.2.9-2ubuntu1.8_amd64.deb
http://security.ubuntu.com/ubuntu/pool/universe/g/gnutls12/gnutls-bin_ 1.2.9-2ubuntu1.8_amd64.deb -
Ubuntu libgnutls-dev_1.2.9-2ubuntu1.8_amd64.deb
http://security.ubuntu.com/ubuntu/pool/main/g/gnutls12/libgnutls-dev_1 .2.9-2ubuntu1.8_amd64.deb -
Ubuntu libgnutls12-dbg_1.2.9-2ubuntu1.8_amd64.deb
http://security.ubuntu.com/ubuntu/pool/universe/g/gnutls12/libgnutls12 -dbg_1.2.9-2ubuntu1.8_amd64.deb -
Ubuntu libgnutls12_1.2.9-2ubuntu1.8_amd64.deb
http://security.ubuntu.com/ubuntu/pool/main/g/gnutls12/libgnutls12_1.2 .9-2ubuntu1.8_amd64.deb
References
GnuTLS X.509 Unknown Hash Algorithm Denial of Service Vulnerability
References:
References: