Vulmon Recent Vulnerabilities Research Posts Trends Blog About Contact

gnu gnutls 1.7.15 vulnerabilities and exploits

(subscribe to this query)
890
VMScore
CVE-2008-1948
The _gnutls_server_name_recv_params function in lib/ext_server_name.c in libgnutls in gnutls-serv in GnuTLS prior to 2.2.4 does not properly calculate the number of Server Names in a TLS 1.0 Client Hello message during extension handling, which allows remote malicious users to ca...
Gnu Gnutls 2.3.5Gnu Gnutls 1.6.0Gnu Gnutls 2.0.0Gnu Gnutls 1.5.0Gnu Gnutls 1.2.8Gnu Gnutls 1.1.14Gnu Gnutls 2.3.4Gnu Gnutls 1.7.3Gnu Gnutls 1.4.1Gnu Gnutls 1.4.3Gnu Gnutls 1.2.11Gnu Gnutls 1.1.21Gnu Gnutls 1.7.5Gnu Gnutls 1.7.11Gnu Gnutls 1.0.20Gnu Gnutls 1.2.5Gnu Gnutls 2.2.4Gnu Gnutls 1.2.4Gnu Gnutls 1.3.1Gnu Gnutls 1.0.24Gnu Gnutls 1.7.15Gnu Gnutls 1.6.1
828
VMScore
CVE-2008-1949
The _gnutls_recv_client_kx_message function in lib/gnutls_kx.c in libgnutls in gnutls-serv in GnuTLS prior to 2.2.4 continues to process Client Hello messages within a TLS message after one has already been processed, which allows remote malicious users to cause a denial of servi...
Gnu Gnutls 2.3.5Gnu Gnutls 1.6.0Gnu Gnutls 2.0.0Gnu Gnutls 1.5.0Gnu Gnutls 1.2.8Gnu Gnutls 1.1.14Gnu Gnutls 2.3.4Gnu Gnutls 1.7.3Gnu Gnutls 1.4.1Gnu Gnutls 1.4.3Gnu Gnutls 1.2.11Gnu Gnutls 1.1.21Gnu Gnutls 1.7.5Gnu Gnutls 1.7.11Gnu Gnutls 1.0.20Gnu Gnutls 1.2.5Gnu Gnutls 2.2.4Gnu Gnutls 1.2.4Gnu Gnutls 1.3.1Gnu Gnutls 1.0.24Gnu Gnutls 1.7.15Gnu Gnutls 1.6.1
445
VMScore
CVE-2008-1950
Integer signedness error in the _gnutls_ciphertext2compressed function in lib/gnutls_cipher.c in libgnutls in GnuTLS prior to 2.2.4 allows remote malicious users to cause a denial of service (buffer over-read and crash) via a certain integer value in the Random field in an encryp...
Gnu Gnutls 2.3.5Gnu Gnutls 1.6.0Gnu Gnutls 2.0.0Gnu Gnutls 1.5.0Gnu Gnutls 1.2.8Gnu Gnutls 1.1.14Gnu Gnutls 2.3.4Gnu Gnutls 1.7.3Gnu Gnutls 1.4.1Gnu Gnutls 1.4.3Gnu Gnutls 1.2.11Gnu Gnutls 1.1.21Gnu Gnutls 1.7.5Gnu Gnutls 1.7.11Gnu Gnutls 1.0.20Gnu Gnutls 1.2.5Gnu Gnutls 2.2.4Gnu Gnutls 1.2.4Gnu Gnutls 1.3.1Gnu Gnutls 1.0.24Gnu Gnutls 1.7.15Gnu Gnutls 1.6.1
668
VMScore
CVE-2009-2730
libgnutls in GnuTLS prior to 2.8.2 does not properly handle a '\0' character in a domain name in the subject's (1) Common Name (CN) or (2) Subject Alternative Name (SAN) field of an X.509 certificate, which allows man-in-the-middle malicious users to spoof arbitrar...
Gnu Gnutls 2.6.5Gnu Gnutls 2.4.2Gnu Gnutls 2.3.3Gnu Gnutls 2.3.9Gnu Gnutls 1.0.18Gnu Gnutls 1.0.19Gnu Gnutls 1.1.14Gnu Gnutls 1.1.15Gnu Gnutls 1.2.0Gnu Gnutls 1.2.11Gnu Gnutls 1.2.6Gnu Gnutls 1.2.8.1a1Gnu Gnutls 1.3.4Gnu Gnutls 1.3.5Gnu Gnutls 2.2.1Gnu Gnutls 1.7.12Gnu Gnutls 2.2.5Gnu Gnutls 1.7.16Gnu Gnutls 2.0.3Gnu Gnutls 1.4.3Gnu Gnutls 2.0.0Gnu Gnutls 1.5.2
445
VMScore
CVE-2009-1417
gnutls-cli in GnuTLS prior to 2.6.6 does not verify the activation and expiration times of X.509 certificates, which allows remote malicious users to successfully present a certificate that is (1) not yet valid or (2) no longer valid, related to lack of time checks in the _gnutls...
Gnu Gnutls 1.0.22Gnu Gnutls 1.0.23Gnu Gnutls 1.0.24Gnu Gnutls 1.1.21Gnu Gnutls 1.1.20Gnu Gnutls 1.1.15Gnu Gnutls 1.0.25Gnu Gnutls 1.2.3Gnu Gnutls 1.2.2Gnu Gnutls 1.3.4Gnu Gnutls 1.2.7Gnu Gnutls 1.5.0Gnu Gnutls 1.4.4Gnu Gnutls 1.6.2Gnu Gnutls 1.5.5Gnu Gnutls 1.7.14Gnu Gnutls 1.7.15Gnu Gnutls 1.0.18Gnu Gnutls 1.0.19Gnu Gnutls 1.1.19Gnu Gnutls 1.1.16Gnu Gnutls 1.2.1
755
VMScore
CVE-2012-1663
Double free vulnerability in libgnutls in GnuTLS prior to 3.0.14 allows remote malicious users to cause a denial of service (application crash) or possibly have unspecified other impact via a crafted certificate list.
Gnu Gnutls 1.1.21Gnu Gnutls 1.2.10Gnu Gnutls 1.2.3Gnu Gnutls 1.2.8Gnu Gnutls 1.2.9Gnu Gnutls 1.4.1Gnu Gnutls 1.0.22Gnu Gnutls 1.0.16Gnu Gnutls 2.4.1Gnu Gnutls 1.1.15Gnu Gnutls 1.0.24Gnu Gnutls 1.4.5Gnu Gnutls 2.10.5Gnu Gnutls 1.1.13Gnu Gnutls 1.7.18Gnu Gnutls 2.0.3Gnu Gnutls 1.4.3Gnu Gnutls 1.5.2Gnu Gnutls 2.1.0Gnu Gnutls 1.5.5Gnu Gnutls 2.1.5Gnu Gnutls 2.1.8
445
VMScore
CVE-2012-1569
The asn1_get_length_der function in decoding.c in GNU Libtasn1 prior to 2.12, as used in GnuTLS prior to 3.0.16 and other products, does not properly handle certain large length values, which allows remote malicious users to cause a denial of service (heap memory corruption and a...
Gnu Libtasn1 2.10Gnu Libtasn1 2.3Gnu Libtasn1 2.2Gnu Libtasn1 1.3Gnu Libtasn1 1.2Gnu Libtasn1 0.3.6Gnu Libtasn1 0.3.5Gnu Libtasn1 0.2.17Gnu Libtasn1 0.2.16Gnu Libtasn1 0.2.15Gnu Libtasn1 0.2.8Gnu Libtasn1 0.2.7Gnu Libtasn1 0.2.0Gnu Libtasn1 0.1.2Gnu Gnutls 1.0.20Gnu Gnutls 1.0.21Gnu Libtasn1 2.5Gnu Libtasn1 2.4Gnu Libtasn1 1.5Gnu Libtasn1 1.4Gnu Libtasn1 0.3.8Gnu Libtasn1 0.3.7
454
VMScore
CVE-2009-2409
The Network Security Services (NSS) library prior to 3.12.3, as used in Firefox; GnuTLS prior to 2.6.4 and 2.7.4; OpenSSL 0.9.8 up to and including 0.9.8k; and other products support MD2 with X.509 certificates, which might allow remote malicious users to spoof certificates by us...
Mozilla FirefoxMozilla NssMozilla Nss 3.0Mozilla Nss 3.2Mozilla Nss 3.2.1Mozilla Nss 3.3Mozilla Nss 3.3.1Mozilla Nss 3.3.2Mozilla Nss 3.4Mozilla Nss 3.4.1Mozilla Nss 3.4.2Mozilla Nss 3.4.3Mozilla Nss 3.5Mozilla Nss 3.6Mozilla Nss 3.6.1Mozilla Nss 3.7Mozilla Nss 3.7.1Mozilla Nss 3.7.2Mozilla Nss 3.7.3Mozilla Nss 3.7.5Mozilla Nss 3.7.7Mozilla Nss 3.8
VMScore
CVSSv2
CVSSv3
VMScore
Recommendations:
path traversalCVE-2024-26978CVE-2024-26982wirelessCVE-2023-6949CVE-2024-26980CVE-2024-32766CVE-2024-26939cache poisoning
Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started

Vulmon Search

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

About

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Products

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Connect

Twitter Reddit Linkedin Facebook