rpm package
suse/gnutls&distro=SUSE Linux Enterprise Server 12
pkg:rpm/suse/gnutls&distro=SUSE%20Linux%20Enterprise%20Server%2012
Vulnerabilities (3)
| CVE | Sev | CVSS | KEV | Affected versions | Fixed in | Published | Description |
|---|---|---|---|---|---|---|---|
| CVE-2015-0294 | — | < 3.2.15-7.2 | 3.2.15-7.2 | Jan 27, 2020 | GnuTLS before 3.3.13 does not validate that the signature algorithms match when importing a certificate. | ||
| CVE-2015-6251 | — | < 3.2.15-11.1 | 3.2.15-11.1 | Aug 24, 2015 | Double free vulnerability in GnuTLS before 3.3.17 and 3.4.x before 3.4.4 allows remote attackers to cause a denial of service via a long DistinguishedName (DN) entry in a certificate. | ||
| CVE-2015-3622 | — | < 3.2.15-11.1 | 3.2.15-11.1 | May 12, 2015 | The _asn1_extract_der_octet function in lib/decoding.c in GNU Libtasn1 before 4.5 allows remote attackers to cause a denial of service (out-of-bounds heap read) via a crafted certificate. |
- CVE-2015-0294Jan 27, 2020affected < 3.2.15-7.2fixed 3.2.15-7.2
GnuTLS before 3.3.13 does not validate that the signature algorithms match when importing a certificate.
- CVE-2015-6251Aug 24, 2015affected < 3.2.15-11.1fixed 3.2.15-11.1
Double free vulnerability in GnuTLS before 3.3.17 and 3.4.x before 3.4.4 allows remote attackers to cause a denial of service via a long DistinguishedName (DN) entry in a certificate.
- CVE-2015-3622May 12, 2015affected < 3.2.15-11.1fixed 3.2.15-11.1
The _asn1_extract_der_octet function in lib/decoding.c in GNU Libtasn1 before 4.5 allows remote attackers to cause a denial of service (out-of-bounds heap read) via a crafted certificate.