GnuTLS 'x509_ext.c' Use After Free Denial of Service Vulnerability
BID:74188
Info
GnuTLS 'x509_ext.c' Use After Free Denial of Service Vulnerability
| Bugtraq ID: | 74188 |
| Class: | Failure to Handle Exceptional Conditions |
| CVE: |
CVE-2015-3308 |
| Remote: | Yes |
| Local: | No |
| Published: | Apr 16 2015 12:00AM |
| Updated: | Oct 26 2015 04:22PM |
| Credit: | Robert Swiecki |
| Vulnerable: |
GNU GnuTLS 2.8.3 GNU GnuTLS 2.8.2 GNU GnuTLS 2.8.1 GNU GnuTLS 2.6.6 GNU GnuTLS 2.6.5 GNU GnuTLS 2.6.4 GNU GnuTLS 2.6.3 GNU GnuTLS 2.6.2 GNU GnuTLS 2.6.1 GNU GnuTLS 2.6 GNU GnuTLS 2.4.1 GNU GnuTLS 2.4 GNU GnuTLS 2.2.5 GNU GnuTLS 2.2.4 GNU GnuTLS 2.2.3 GNU GnuTLS 2.2.2 GNU GnuTLS 2.2.1 GNU GnuTLS 2.2 GNU GnuTLS 2.0 GNU GnuTLS 1.4.3 GNU GnuTLS 1.4.2 GNU GnuTLS 1.4 GNU GnuTLS 1.3.4 GNU GnuTLS 1.3.3 GNU GnuTLS 1.3.2 GNU GnuTLS 1.3.1 GNU GnuTLS 1.3 GNU GnuTLS 1.2.10 GNU GnuTLS 1.2.9 GNU GnuTLS 1.2.8 GNU GnuTLS 1.2.7 GNU GnuTLS 1.2.6 GNU GnuTLS 1.2.5 GNU GnuTLS 1.2.4 GNU GnuTLS 1.2.3 GNU GnuTLS 1.2.2 GNU GnuTLS 1.2.1 GNU GnuTLS 1.2 GNU GnuTLS 1.0.25 GNU GnuTLS 1.0.23 GNU GnuTLS 1.0.20 GNU GnuTLS 1.0.17 GNU GnuTLS 1.0.16 GNU GnuTLS 1.0.15 GNU GnuTLS 1.0.14 GNU GnuTLS 1.0.13 GNU GnuTLS 1.0.9 GNU GnuTLS 1.0.8 GNU GnuTLS 1.0.7 GNU GnuTLS 1.0.6 GNU GnuTLS 1.0.5 GNU GnuTLS 1.0.4 GNU GnuTLS 1.0.3 GNU GnuTLS 1.0.2 GNU GnuTLS 1.0.1 GNU GnuTLS 1.0 GNU GnuTLS 3.0.7 GNU GnuTLS 3.0.6 GNU GnuTLS 3.0.16 GNU GnuTLS 3.0.15 GNU GnuTLS 3.0.14 GNU GnuTLS 3.0.11 GNU GnuTLS 3.0.10 GNU GnuTLS 2.12.14 GNU GnuTLS 2.12.13 |
| Not Vulnerable: | |
Discussion
GnuTLS 'x509_ext.c' Use After Free Denial of Service Vulnerability
GnuTLS is prone to a denial-of-service vulnerability.
Attackers can exploit this issue to crash the affected application, denying service to legitimate users.
GnuTLS is prone to a denial-of-service vulnerability.
Attackers can exploit this issue to crash the affected application, denying service to legitimate users.
Exploit / POC
GnuTLS 'x509_ext.c' Use After Free Denial of Service Vulnerability
Currently, we are not aware of any working exploits. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].
Currently, we are not aware of any working exploits. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].
Solution / Fix
GnuTLS 'x509_ext.c' Use After Free Denial of Service Vulnerability
Solution:
Updates are available. Please see the references or vendor advisory for more information.
Solution:
Updates are available. Please see the references or vendor advisory for more information.
References
GnuTLS 'x509_ext.c' Use After Free Denial of Service Vulnerability
References:
References:
- GnuTLS Homepage (GNU)