GnuTLS CVE-2014-8155 Certificate Validation Security Bypass Vulnerability
BID:73317
Info
GnuTLS CVE-2014-8155 Certificate Validation Security Bypass Vulnerability
| Bugtraq ID: | 73317 |
| Class: | Design Error |
| CVE: |
CVE-2014-8155 |
| Remote: | Yes |
| Local: | No |
| Published: | Mar 24 2015 12:00AM |
| Updated: | Aug 12 2015 10:11PM |
| Credit: | Marcel Kolaja of Red Hat |
| Vulnerable: |
Ubuntu Ubuntu Linux 14.10 Ubuntu Ubuntu Linux 14.04 LTS Ubuntu Ubuntu Linux 12.04 LTS i386 Ubuntu Ubuntu Linux 12.04 LTS amd64 Ubuntu Ubuntu Linux 10.04 sparc Ubuntu Ubuntu Linux 10.04 powerpc Ubuntu Ubuntu Linux 10.04 i386 Ubuntu Ubuntu Linux 10.04 ARM Ubuntu Ubuntu Linux 10.04 amd64 Redhat Enterprise Linux Workstation Optional 6 Redhat Enterprise Linux Workstation 6 Redhat Enterprise Linux Server Optional 6 Redhat Enterprise Linux Server 6 Redhat Enterprise Linux HPC Node Optional 6 Redhat Enterprise Linux HPC Node 6 Redhat Enterprise Linux Desktop Optional 6 Redhat Enterprise Linux Desktop 6 GNU GnuTLS 2.8.3 GNU GnuTLS 2.8.2 GNU GnuTLS 2.8.1 GNU GnuTLS 2.7.6 GNU GnuTLS 2.7.5 GNU GnuTLS 2.6.6 GNU GnuTLS 2.6.5 GNU GnuTLS 2.6.4 GNU GnuTLS 2.6.3 GNU GnuTLS 2.6.2 GNU GnuTLS 2.6.1 GNU GnuTLS 2.6 GNU GnuTLS 2.4.1 GNU GnuTLS 2.4 GNU GnuTLS 2.2.5 GNU GnuTLS 2.2.4 GNU GnuTLS 2.2.3 GNU GnuTLS 2.2.2 GNU GnuTLS 2.2.1 GNU GnuTLS 2.2 GNU GnuTLS 2.0 GNU GnuTLS 1.7.17 GNU GnuTLS 1.7.16 GNU GnuTLS 1.4.3 GNU GnuTLS 1.4.2 GNU GnuTLS 1.4 GNU GnuTLS 1.3.4 GNU GnuTLS 1.3.3 GNU GnuTLS 1.3.2 GNU GnuTLS 1.3.1 GNU GnuTLS 1.3 GNU GnuTLS 1.2.10 GNU GnuTLS 1.2.9 GNU GnuTLS 1.2.8 GNU GnuTLS 1.2.7 GNU GnuTLS 1.2.6 GNU GnuTLS 1.2.5 GNU GnuTLS 1.2.4 GNU GnuTLS 1.2.3 GNU GnuTLS 1.2.2 GNU GnuTLS 1.2.1 GNU GnuTLS 1.2 GNU GnuTLS 1.0.25 GNU GnuTLS 1.0.23 GNU GnuTLS 1.0.20 GNU GnuTLS 1.0.17 GNU GnuTLS 1.0.16 GNU GnuTLS 1.0.15 GNU GnuTLS 1.0.14 GNU GnuTLS 1.0.13 GNU GnuTLS 1.0.9 GNU GnuTLS 1.0.8 GNU GnuTLS 1.0.7 GNU GnuTLS 1.0.6 GNU GnuTLS 1.0.5 GNU GnuTLS 1.0.4 GNU GnuTLS 1.0.3 GNU GnuTLS 1.0.2 GNU GnuTLS 1.0.1 GNU GnuTLS 1.0 GNU GnuTLS 2.8.6 GNU GnuTLS 2.8.5 GNU GnuTLS 2.8.4 GNU GnuTLS 2.8.0 GNU GnuTLS 2.7.4 GNU GnuTLS 2.7.3 GNU GnuTLS 2.7.2 GNU GnuTLS 2.7.1 GNU GnuTLS 2.7.0 GNU GnuTLS 2.5.0 GNU GnuTLS 2.4.3 GNU GnuTLS 2.3.8 GNU GnuTLS 2.3.7 GNU GnuTLS 2.3.6 GNU GnuTLS 2.3.5 GNU GnuTLS 2.3.4 GNU GnuTLS 2.3.3 GNU GnuTLS 2.3.2 GNU GnuTLS 2.3.11 GNU GnuTLS 2.3.10 GNU GnuTLS 2.3.1 GNU GnuTLS 2.3.0 GNU GnuTLS 2.1.8 GNU GnuTLS 2.1.7 GNU GnuTLS 2.1.6 GNU GnuTLS 2.1.5 GNU GnuTLS 2.1.4 GNU GnuTLS 2.1.3 GNU GnuTLS 2.1.2 GNU GnuTLS 2.1.1 GNU GnuTLS 2.1.0 GNU GnuTLS 2.0.4 GNU GnuTLS 2.0.3 GNU GnuTLS 2.0.2 GNU GnuTLS 2.0.1 GNU GnuTLS 1.7.9 GNU GnuTLS 1.7.8 GNU GnuTLS 1.7.7 GNU GnuTLS 1.7.6 GNU GnuTLS 1.7.5 GNU GnuTLS 1.7.4 GNU GnuTLS 1.7.3 GNU GnuTLS 1.7.2 GNU GnuTLS 1.7.19 GNU GnuTLS 1.7.18 GNU GnuTLS 1.7.15 GNU GnuTLS 1.7.14 GNU GnuTLS 1.7.13 GNU GnuTLS 1.7.12 GNU GnuTLS 1.7.11 GNU GnuTLS 1.7.10 GNU GnuTLS 1.7.1 GNU GnuTLS 1.7.0 GNU GnuTLS 1.6.3 GNU GnuTLS 1.6.2 GNU GnuTLS 1.6.1 GNU GnuTLS 1.6.0 GNU GnuTLS 1.5.5 GNU GnuTLS 1.5.4 GNU GnuTLS 1.5.3 GNU GnuTLS 1.5.2 GNU GnuTLS 1.5.1 GNU GnuTLS 1.5.0 GNU GnuTLS 1.4.5 GNU GnuTLS 1.4.4 GNU GnuTLS 1.2.8.1A1 GNU GnuTLS 1.1.13 |
| Not Vulnerable: |
GNU GnuTLS 2.9.10 |
Discussion
GnuTLS CVE-2014-8155 Certificate Validation Security Bypass Vulnerability
GnuTLS is prone to a security-bypass vulnerability.
Successfully exploiting this issue allows attackers to perform man-in-the-middle attacks or impersonate trusted servers, which will aid in further attacks.
GnuTLS is prone to a security-bypass vulnerability.
Successfully exploiting this issue allows attackers to perform man-in-the-middle attacks or impersonate trusted servers, which will aid in further attacks.