← All advisories

Unrated severityNVD Advisory· Published Jan 27, 2020· Updated Aug 6, 2024

CVE-2015-0294

CVE-2015-0294

Description

GnuTLS before 3.3.13 does not validate that the signature algorithms match when importing a certificate.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

6

mod_gnutls/mod_gnutlsllm-fuzzy
Range: <3.3.13
osv-coords4 versions
pkg:rpm/suse/gnutls&distro=SUSE%20Linux%20Enterprise%20Desktop%2012 pkg:rpm/suse/gnutls&distro=SUSE%20Linux%20Enterprise%20Server%2012 pkg:rpm/suse/gnutls&distro=SUSE%20Linux%20Enterprise%20Server%20for%20SAP%20Applications%2012 pkg:rpm/suse/gnutls&distro=SUSE%20Linux%20Enterprise%20Software%20Development%20Kit%2012
< 3.2.15-7.2+ 3 more
- (no CPE)range: < 3.2.15-7.2
- (no CPE)range: < 3.2.15-7.2
- (no CPE)range: < 3.2.15-7.2
- (no CPE)range: < 3.2.15-7.2
Free Software Foundation Inc./Gnutlsv5
Range: before 3.3.13

Patches

Vulnerability mechanics

References

3

www.debian.org/security/2015/dsa-3191mitrex_refsource_MISC
bugzilla.redhat.com/show_bug.cgimitrex_refsource_MISC
gitlab.com/gnutls/gnutls/commit/6e76e9b9fa845b76b0b9a45f05f4b54a052578ffmitrex_refsource_MISC

News mentions

0

No linked articles in our index yet.