CVE-2011-4128
published 2011-12-08CVE-2011-4128: Buffer overflow in the gnutls_session_get_data function in lib/gnutls_session.c in GnuTLS 2.12.x before 2.12.14 and 3.x before 3.0.7, when used on a client…
PriorityP419medium4.3CVSS 2.0
AVNACMAuNCNINAP
EPSS
2.30%
81.5th percentile
Buffer overflow in the gnutls_session_get_data function in lib/gnutls_session.c in GnuTLS 2.12.x before 2.12.14 and 3.x before 3.0.7, when used on a client that performs nonstandard session resumption, allows remote TLS servers to cause a denial of service (application crash) via a large SessionTicket.
Affected
22 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| gnu | gnutls | — | — |
| gnu | gnutls | — | — |
| gnu | gnutls | — | — |
| gnu | gnutls | — | — |
| gnu | gnutls | — | — |
| gnu | gnutls | — | — |
| gnu | gnutls | — | — |
| gnu | gnutls | — | — |
| gnu | gnutls | — | — |
| gnu | gnutls | — | — |
| gnu | gnutls | — | — |
| gnu | gnutls | — | — |
| gnu | gnutls | — | — |
| gnu | gnutls | — | — |
| gnu | gnutls | — | — |
| gnu | gnutls | — | — |
| gnu | gnutls | — | — |
| gnu | gnutls | — | — |
| gnu | gnutls | — | — |
| gnu | gnutls | — | — |
| gnu | gnutls | — | — |
| gnu | gnutls | — | — |
CVSS provenance
nvdv2.04.3MEDIUMAV:N/AC:M/Au:N/C:N/I:N/A:P
vendor_redhat4.3MEDIUM
vendor_ubuntu4.3MEDIUM
Stop checking back — get the weekly exploitation signal.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
Ubuntu
GnuTLS vulnerabilities
vendor_ubuntu·2012-04-05·CVSS 4.3
CVE-2012-1573 [MEDIUM] GnuTLS vulnerabilities
Title: GnuTLS vulnerabilities
Summary: The GnuTLS library could be made to crash under certain conditions.
Alban Crequy discovered that the GnuTLS library incorrectly checked array
bounds when copying TLS session data. A remote attacker could crash a client
application, leading to a denial of service, as the client application prepared
for TLS session resumption. (CVE-2011-4128)
Matthew Hall discovered that the GnuTLS library incorrectly handled TLS
records. A remote attacker could crash client and server applications, leading
to a denial of service, by sending a crafted TLS record. (CVE-2012-1573)
Instructions: In general, a standard system update will make all the necessary changes.
Red Hat
gnutls: buffer overflow in gnutls_session_get_data() (GNUTLS-SA-2011-2)
vendor_redhat·2011-11-07·CVSS 4.3
CVE-2011-4128 [MEDIUM] gnutls: buffer overflow in gnutls_session_get_data() (GNUTLS-SA-2011-2)
gnutls: buffer overflow in gnutls_session_get_data() (GNUTLS-SA-2011-2)
Buffer overflow in the gnutls_session_get_data function in lib/gnutls_session.c in GnuTLS 2.12.x before 2.12.14 and 3.x before 3.0.7, when used on a client that performs nonstandard session resumption, allows remote TLS servers to cause a denial of service (application crash) via a large SessionTicket.
Statement: This issue does not affect the version of gnutls as shipped with Red Hat Enterprise Linux 4.
Package: gnutls (Red Hat Enterprise Linux 4) - Not affected
Package: mingw32-gnutls (Red Hat Enterprise Linux 6) - Will not fix
GHSA
GHSA-frg2-36r7-7hpc: Buffer overflow in the gnutls_session_get_data function in lib/gnutls_session
ghsa_unreviewed·2022-05-14
CVE-2011-4128 [MEDIUM] CWE-119 GHSA-frg2-36r7-7hpc: Buffer overflow in the gnutls_session_get_data function in lib/gnutls_session
Buffer overflow in the gnutls_session_get_data function in lib/gnutls_session.c in GnuTLS 2.12.x before 2.12.14 and 3.x before 3.0.7, when used on a client that performs nonstandard session resumption, allows remote TLS servers to cause a denial of service (application crash) via a large SessionTicket.
No detection rules found.
No public exploits indexed.
Bugzilla
CVE-2011-4128 gnutls: possible DoS due to buffer overflow (GNUTLS-SA-2011-2) [fedora-all]
bugzilla·2011-11-10·CVSS 4.3
CVE-2011-4128 [MEDIUM] CVE-2011-4128 gnutls: possible DoS due to buffer overflow (GNUTLS-SA-2011-2) [fedora-all]
CVE-2011-4128 gnutls: possible DoS due to buffer overflow (GNUTLS-SA-2011-2) [fedora-all]
This is an automatically created tracking bug! It was created to ensure
that one or more security vulnerabilities are fixed in affected Fedora
versions.
For comments that are specific to the vulnerability please use bugs filed
against "Security Response" product referenced in the "Blocks" field.
For more information see:
http://fedoraproject.org/wiki/Security/TrackingBugs
When creating a Bodhi update request, please include this bug ID and the
bug IDs of this bug's parent bugs filed against the "Security Response"
product (the top-level CVE bugs). Please mention the CVE IDs being fixed
in the RPM changelog when available.
Bodhi update submission link:
https://admin.fedoraproject.org/updates/new/?
Bugzilla
CVE-2011-4128 gnutls: buffer overflow in gnutls_session_get_data() (GNUTLS-SA-2011-2)
bugzilla·2011-11-09·CVSS 4.3
CVE-2011-4128 [MEDIUM] CVE-2011-4128 gnutls: buffer overflow in gnutls_session_get_data() (GNUTLS-SA-2011-2)
CVE-2011-4128 gnutls: buffer overflow in gnutls_session_get_data() (GNUTLS-SA-2011-2)
A flaw was reported [1] in the GnuTLS gnutls_session_get_data() function, which could overflow a too-short buffer parameter allocated by the caller. The test which was to avoid such buffer overflows was not working. A malicious server could use this flaw in a vulnerable client to send a larger SessionTicket in the hope of overflowing the client.
Upstream has indicated that they are unaware of any client software that does not properly use the session resumption functions; clients that perform session resumption as documented [2] are not vulnerable.
[1] http://article.gmane.org/gmane.comp.encryption.gpg.gnutls.devel/5596
[2] http://www.gnu.org/s/gnutls/manual/html_node/Client-with-Resume-capability-exam
http://article.gmane.org/gmane.comp.encryption.gpg.gnutls.devel/5596http://git.savannah.gnu.org/gitweb/?p=gnutls.git%3Ba=commitdiff%3Bh=190cef6eed37d0e73a73c1e205eb31d45ab60a3chttp://git.savannah.gnu.org/gitweb/?p=gnutls.git%3Ba=commitdiff%3Bh=e82ef4545e9e98cbcb032f55d7c750b81e3a0450http://lists.fedoraproject.org/pipermail/package-announce/2012-April/077071.htmlhttp://openwall.com/lists/oss-security/2011/11/09/2http://openwall.com/lists/oss-security/2011/11/09/4http://rhn.redhat.com/errata/RHSA-2012-0429.htmlhttp://rhn.redhat.com/errata/RHSA-2012-0488.htmlhttp://rhn.redhat.com/errata/RHSA-2012-0531.htmlhttp://secunia.com/advisories/48596http://secunia.com/advisories/48712http://www.gnu.org/software/gnutls/security.htmlhttp://www.mandriva.com/security/advisories?name=MDVSA-2012:045http://www.ubuntu.com/usn/USN-1418-1https://bugzilla.redhat.com/show_bug.cgi?id=752308http://article.gmane.org/gmane.comp.encryption.gpg.gnutls.devel/5596http://git.savannah.gnu.org/gitweb/?p=gnutls.git%3Ba=commitdiff%3Bh=190cef6eed37d0e73a73c1e205eb31d45ab60a3chttp://git.savannah.gnu.org/gitweb/?p=gnutls.git%3Ba=commitdiff%3Bh=e82ef4545e9e98cbcb032f55d7c750b81e3a0450http://lists.fedoraproject.org/pipermail/package-announce/2012-April/077071.htmlhttp://openwall.com/lists/oss-security/2011/11/09/2http://openwall.com/lists/oss-security/2011/11/09/4http://rhn.redhat.com/errata/RHSA-2012-0429.htmlhttp://rhn.redhat.com/errata/RHSA-2012-0488.htmlhttp://rhn.redhat.com/errata/RHSA-2012-0531.htmlhttp://secunia.com/advisories/48596http://secunia.com/advisories/48712http://www.gnu.org/software/gnutls/security.htmlhttp://www.mandriva.com/security/advisories?name=MDVSA-2012:045http://www.ubuntu.com/usn/USN-1418-1https://bugzilla.redhat.com/show_bug.cgi?id=752308
2011-12-08
Published