Unrated severityNVD Advisory· Published Mar 24, 2015· Updated Jun 17, 2026

CVE-2015-0282

Description

GnuTLS before 3.1.0 does not verify that the RSA PKCS #1 signature algorithm matches the signature algorithm in the certificate, which allows remote attackers to conduct downgrade attacks via unspecified vectors.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

GNU/Gnutls
cpe:2.3:a:gnu:gnutls:*:*:*:*:*:*:*:*
Range: <=3.0.9
mod_gnutls/mod_gnutlsllm-fuzzy
Range: <3.1.0

Patches

Vulnerability mechanics

References

www.gnutls.org/security.htmlnvdVendor Advisory
rhn.redhat.com/errata/RHSA-2015-1457.htmlnvd
www.debian.org/security/2015/dsa-3191nvd
www.securityfocus.com/bid/73119nvd
www.securitytracker.com/id/1032148nvd

News mentions

No linked articles in our index yet.

cvss	0.000
epss	0.001
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000