Vulmon Recent Vulnerabilities Research Posts Trends Blog About Contact

gnu gnutls 2.12.11 vulnerabilities and exploits

(subscribe to this query)
NA
CVE-2011-4128
Buffer overflow in the gnutls_session_get_data function in lib/gnutls_session.c in GnuTLS 2.12.x prior to 2.12.14 and 3.x prior to 3.0.7, when used on a client that performs nonstandard session resumption, allows remote TLS servers to cause a denial of service (application crash)...
Gnu Gnutls 2.12.2Gnu Gnutls 2.12.7Gnu Gnutls 2.12.5Gnu Gnutls 2.12.8Gnu Gnutls 2.12.6.1Gnu Gnutls 2.12.0Gnu Gnutls 2.12.10Gnu Gnutls 2.12.6Gnu Gnutls 2.12.9Gnu Gnutls 2.12.13Gnu Gnutls 2.12.12Gnu Gnutls 2.12.3Gnu Gnutls 2.12.4Gnu Gnutls 2.12.11Gnu Gnutls 2.12.1Gnu Gnutls 3.0.3Gnu Gnutls 3.0.6Gnu Gnutls 3.0.0Gnu Gnutls 3.0.2Gnu Gnutls 3.0.5Gnu Gnutls 3.0.1Gnu Gnutls 3.0.4
NA
CVE-2012-0390
The DTLS implementation in GnuTLS 3.0.10 and previous versions executes certain error-handling code only if there is a specific relationship between a padding length and the ciphertext size, which makes it easier for remote malicious users to recover partial plaintext via a timin...
Gnu Gnutls 3.0.9Gnu Gnutls 3.0.8Gnu Gnutls 3.0.1Gnu Gnutls 3.0.0Gnu Gnutls 2.12.7Gnu Gnutls 2.12.6Gnu Gnutls 2.12.0Gnu Gnutls 2.10.5Gnu Gnutls 2.10.1-x86Gnu Gnutls 2.10.0Gnu Gnutls 2.6.6Gnu Gnutls 2.6.5Gnu Gnutls 2.4.2Gnu Gnutls 2.4.1Gnu Gnutls 3.0.7Gnu Gnutls 3.0.6Gnu Gnutls 2.12.14Gnu GnutlsGnu Gnutls 3.0.3Gnu Gnutls 3.0.2Gnu Gnutls 2.12.9Gnu Gnutls 2.12.8
NA
CVE-2012-1573
gnutls_cipher.c in libgnutls in GnuTLS prior to 2.12.17 and 3.x prior to 3.0.15 does not properly handle data encrypted with a block cipher, which allows remote malicious users to cause a denial of service (heap memory corruption and application crash) via a crafted record, as de...
Gnu Gnutls 2.12.15Gnu Gnutls 2.3.5Gnu Gnutls 2.10.2Gnu Gnutls 2.0.0Gnu Gnutls 2.8.3Gnu Gnutls 2.3.4Gnu Gnutls 2.12.2Gnu Gnutls 2.7.4Gnu Gnutls 2.6.1Gnu Gnutls 2.2.4Gnu Gnutls 2.1.0Gnu Gnutls 2.3.1Gnu Gnutls 2.12.7Gnu Gnutls 2.12.5Gnu Gnutls 2.2.5Gnu Gnutls 2.1.1Gnu Gnutls 2.3.8Gnu Gnutls 2.8.5Gnu Gnutls 2.1.7Gnu Gnutls 2.10.4Gnu Gnutls 2.1.4Gnu Gnutls 2.6.0
NA
CVE-2013-1619
The TLS implementation in GnuTLS prior to 2.12.23, 3.0.x prior to 3.0.28, and 3.1.x prior to 3.1.7 does not properly consider timing side-channel attacks on a noncompliant MAC check operation during the processing of malformed CBC padding, which allows remote malicious users to c...
Gnu Gnutls 2.12.2Gnu Gnutls 2.12.3Gnu Gnutls 2.6.4Gnu Gnutls 2.6.5Gnu Gnutls 2.6.1Gnu Gnutls 2.12.17Gnu Gnutls 2.12.9Gnu Gnutls 2.12.10Gnu Gnutls 2.8.4Gnu Gnutls 2.8.5Gnu Gnutls 2.10.5Gnu Gnutls 2.12.4Gnu Gnutls 2.12.5Gnu Gnutls 2.4.2Gnu Gnutls 2.4.1Gnu Gnutls 2.7.4Gnu Gnutls 2.12.15Gnu Gnutls 2.3.11Gnu Gnutls 2.12.11Gnu Gnutls 2.12.12Gnu Gnutls 2.8.6Gnu Gnutls 2.10.0
NA
CVE-2012-1663
Double free vulnerability in libgnutls in GnuTLS prior to 3.0.14 allows remote malicious users to cause a denial of service (application crash) or possibly have unspecified other impact via a crafted certificate list.
Gnu Gnutls 1.1.21Gnu Gnutls 1.2.10Gnu Gnutls 1.2.3Gnu Gnutls 1.2.8Gnu Gnutls 1.2.9Gnu Gnutls 1.4.1Gnu Gnutls 1.0.22Gnu Gnutls 1.0.16Gnu Gnutls 2.4.1Gnu Gnutls 1.1.15Gnu Gnutls 1.0.24Gnu Gnutls 1.4.5Gnu Gnutls 2.10.5Gnu Gnutls 1.1.13Gnu Gnutls 1.7.18Gnu Gnutls 2.0.3Gnu Gnutls 1.4.3Gnu Gnutls 1.5.2Gnu Gnutls 2.1.0Gnu Gnutls 1.5.5Gnu Gnutls 2.1.5Gnu Gnutls 2.1.8
NA
CVE-2012-1569
The asn1_get_length_der function in decoding.c in GNU Libtasn1 prior to 2.12, as used in GnuTLS prior to 3.0.16 and other products, does not properly handle certain large length values, which allows remote malicious users to cause a denial of service (heap memory corruption and a...
Gnu Libtasn1 2.10Gnu Libtasn1 2.3Gnu Libtasn1 2.2Gnu Libtasn1 1.3Gnu Libtasn1 1.2Gnu Libtasn1 0.3.6Gnu Libtasn1 0.3.5Gnu Libtasn1 0.2.17Gnu Libtasn1 0.2.16Gnu Libtasn1 0.2.15Gnu Libtasn1 0.2.8Gnu Libtasn1 0.2.7Gnu Libtasn1 0.2.0Gnu Libtasn1 0.1.2Gnu Gnutls 1.0.20Gnu Gnutls 1.0.21Gnu Libtasn1 2.5Gnu Libtasn1 2.4Gnu Libtasn1 1.5Gnu Libtasn1 1.4Gnu Libtasn1 0.3.8Gnu Libtasn1 0.3.7
CVSSv3
CVSSv2
CVSSv3
VMScore
Recommendations:
CVE-2022-48654CVE-2024-2757authentication bypassCVE-2024-3194CVE-2024-33640CVE-2024-21111dosinsecure direct object referenceCVE-2024-21345
Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started

Vulmon Search

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

About

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Products

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Connect

Twitter Reddit Linkedin Facebook