CVE-2014-0092
published 2014-03-07CVE-2014-0092: lib/x509/verify.c in GnuTLS before 3.1.22 and 3.2.x before 3.2.12 does not properly handle unspecified errors when verifying X.509 certificates from SSL…
PriorityP339medium5.8CVSS 2.0
AVNACMAuNCPIPAN
EPSS
29.96%
98.0th percentile
lib/x509/verify.c in GnuTLS before 3.1.22 and 3.2.x before 3.2.12 does not properly handle unspecified errors when verifying X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers via a crafted certificate.
Affected
36 ranges· showing 25
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| debian | gnutls28 | < gnutls28 3.2.11-2 (bookworm) | gnutls28 3.2.11-2 (bookworm) |
| gnu | gnutls | <= 3.2.11 | — |
| gnu | gnutls | <= 3.1.21 | — |
| gnu | gnutls | — | — |
| gnu | gnutls | — | — |
| gnu | gnutls | — | — |
| gnu | gnutls | — | — |
| gnu | gnutls | — | — |
| gnu | gnutls | — | — |
| gnu | gnutls | — | — |
| gnu | gnutls | — | — |
| gnu | gnutls | — | — |
| gnu | gnutls | — | — |
| gnu | gnutls | — | — |
| gnu | gnutls | — | — |
| gnu | gnutls | — | — |
| gnu | gnutls | — | — |
| gnu | gnutls | — | — |
| gnu | gnutls | — | — |
| gnu | gnutls | — | — |
| gnu | gnutls | — | — |
| gnu | gnutls | — | — |
| gnu | gnutls | — | — |
| gnu | gnutls | — | — |
| gnu | gnutls | — | — |
CVSS provenance
nvdv2.05.8MEDIUMAV:N/AC:M/Au:N/C:P/I:P/A:N
osv5.8MEDIUM
vendor_debian5.8MEDIUM
vendor_redhat5.8MEDIUM
Stop checking back — get the weekly exploitation signal.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
CISA ICS
Siemens RuggedCom ROX-based Devices Certificate Verification Vulnerability (Update A)
cisa_ics·2018-09-06
Siemens RuggedCom ROX-based Devices Certificate Verification Vulnerability (Update A)
## Archived Content In an effort to keep CISA.gov current, the archive contains outdated information that may not reflect current policy or programs.
ICS Advisory
##
Siemens RuggedCom ROX-based Devices Certificate Verification Vulnerability (Update A)
Last RevisedSeptember 06, 2018
Alert CodeICSA-14-135-03A
## OVERVIEW
This updated advisory is a follow-up to the original advisory titled ICSA-14-135-03 Siemens RuggedCom ROX-Based Devices Certificate Verification Vulnerability that was published May 15, 2014, on the NCCIC/ICS-CERT web site.
Siemens has reported to ICS-CERT an incorrect certificate verification in RuggedCom ROX‑based devices. Siemens is working on a firmware update for the affected products.
This vulnerability could be exploi
Ubuntu
GnuTLS vulnerability
vendor_ubuntu·2014-03-04
CVE-2014-0092 GnuTLS vulnerability
Title: GnuTLS vulnerability
Summary: Fraudulent security certificates could allow sensitive information to
be exposed when accessing the Internet.
Nikos Mavrogiannopoulos discovered that GnuTLS incorrectly handled
certificate verification functions. If a remote attacker were able to
perform a machine-in-the-middle attack, this flaw could be exploited with
specially crafted certificates to view sensitive information.
Instructions: In general, a standard system update will make all the necessary changes.
Red Hat
gnutls: incorrect error handling in certificate verification (GNUTLS-SA-2014-2)
vendor_redhat·2014-03-03·CVSS 5.8
CVE-2014-0092 [MEDIUM] CWE-295 gnutls: incorrect error handling in certificate verification (GNUTLS-SA-2014-2)
gnutls: incorrect error handling in certificate verification (GNUTLS-SA-2014-2)
lib/x509/verify.c in GnuTLS before 3.1.22 and 3.2.x before 3.2.12 does not properly handle unspecified errors when verifying X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers via a crafted certificate.
Package: mingw32-gnutls (Red Hat Enterprise Linux 6) - Will not fix
Package: gnutls (Red Hat Enterprise Linux 7) - Not affected
Package: gnutls (Red Hat Enterprise Linux Extended Update Support 5.3) - Affected
Package: gnutls (Red Hat Enterprise Linux Extended Update Support 5.6) - Affected
Debian
CVE-2014-0092: gnutls28 - lib/x509/verify.c in GnuTLS before 3.1.22 and 3.2.x before 3.2.12 does not prope...
vendor_debian·2014·CVSS 5.8
CVE-2014-0092 [MEDIUM] CVE-2014-0092: gnutls28 - lib/x509/verify.c in GnuTLS before 3.1.22 and 3.2.x before 3.2.12 does not prope...
lib/x509/verify.c in GnuTLS before 3.1.22 and 3.2.x before 3.2.12 does not properly handle unspecified errors when verifying X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers via a crafted certificate.
Scope: local
bookworm: resolved (fixed in 3.2.11-2)
bullseye: resolved (fixed in 3.2.11-2)
forky: resolved (fixed in 3.2.11-2)
sid: resolved (fixed in 3.2.11-2)
trixie: resolved (fixed in 3.2.11-2)
GHSA
Forge has a basicConstraints bypass in its certificate chain verification (RFC 5280 violation)
ghsa·2026-03-26
CVE-2026-33896 [HIGH] CWE-295 Forge has a basicConstraints bypass in its certificate chain verification (RFC 5280 violation)
Forge has a basicConstraints bypass in its certificate chain verification (RFC 5280 violation)
## Summary
`pki.verifyCertificateChain()` does not enforce RFC 5280 basicConstraints requirements when an intermediate certificate lacks both the `basicConstraints` and `keyUsage` extensions. This allows any leaf certificate (without these extensions) to act as a CA and sign other certificates, which node-forge will accept as valid.
## Technical Details
In `lib/x509.js`, the `verifyCertificateChain()` function (around lines 3147-3199) has two conditional checks for CA authorization:
1. The `keyUsage` check (which includes a sub-check requiring `basicConstraints` to be present) is gated on `keyUsageExt !== null`
2. The `basicConstraints.cA` check is gated on `bcExt !== null`
When a certifica
OSV
Forge has a basicConstraints bypass in its certificate chain verification (RFC 5280 violation)
osv·2026-03-26
CVE-2026-33896 [HIGH] Forge has a basicConstraints bypass in its certificate chain verification (RFC 5280 violation)
Forge has a basicConstraints bypass in its certificate chain verification (RFC 5280 violation)
## Summary
`pki.verifyCertificateChain()` does not enforce RFC 5280 basicConstraints requirements when an intermediate certificate lacks both the `basicConstraints` and `keyUsage` extensions. This allows any leaf certificate (without these extensions) to act as a CA and sign other certificates, which node-forge will accept as valid.
## Technical Details
In `lib/x509.js`, the `verifyCertificateChain()` function (around lines 3147-3199) has two conditional checks for CA authorization:
1. The `keyUsage` check (which includes a sub-check requiring `basicConstraints` to be present) is gated on `keyUsageExt !== null`
2. The `basicConstraints.cA` check is gated on `bcExt !== null`
When a certifica
GHSA
GHSA-c9fv-cm23-r7xv: lib/x509/verify
ghsa_unreviewed·2022-05-17
CVE-2014-0092 [MEDIUM] GHSA-c9fv-cm23-r7xv: lib/x509/verify
lib/x509/verify.c in GnuTLS before 3.1.22 and 3.2.x before 3.2.12 does not properly handle unspecified errors when verifying X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers via a crafted certificate.
OSV
CVE-2014-0092: lib/x509/verify
osv·2014-03-07·CVSS 5.8
CVE-2014-0092 [MEDIUM] CVE-2014-0092: lib/x509/verify
lib/x509/verify.c in GnuTLS before 3.1.22 and 3.2.x before 3.2.12 does not properly handle unspecified errors when verifying X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers via a crafted certificate.
No detection rules found.
No public exploits indexed.
Bugzilla
CVE-2014-0092 gnutls: incorrect error handling in certificate verification (GNUTLS-SA-2014-2) [fedora-all]
bugzilla·2014-03-03·CVSS 5.8
CVE-2014-0092 [MEDIUM] CVE-2014-0092 gnutls: incorrect error handling in certificate verification (GNUTLS-SA-2014-2) [fedora-all]
CVE-2014-0092 gnutls: incorrect error handling in certificate verification (GNUTLS-SA-2014-2) [fedora-all]
This is an automatically created tracking bug! It was created to ensure
that one or more security vulnerabilities are fixed in affected versions
of Fedora.
For comments that are specific to the vulnerability please use bugs filed
against the "Security Response" product referenced in the "Blocks" field.
For more information see:
http://fedoraproject.org/wiki/Security/TrackingBugs
When creating a Bodhi update request, please use the bodhi submission link
noted in the next comment(s). This will include the bug IDs of this
tracking bug as well as the relevant top-level CVE bugs.
Please also mention the CVE IDs being fixed in the RPM changelog and the
Bodhi notes field when available.
Bugzilla
CVE-2014-0092 mingw32-gnutls: gnutls: incorrect error handling in certificate verification (GNUTLS-SA-2014-2) [epel-5]
bugzilla·2014-03-03·CVSS 5.8
CVE-2014-0092 [MEDIUM] CVE-2014-0092 mingw32-gnutls: gnutls: incorrect error handling in certificate verification (GNUTLS-SA-2014-2) [epel-5]
CVE-2014-0092 mingw32-gnutls: gnutls: incorrect error handling in certificate verification (GNUTLS-SA-2014-2) [epel-5]
This is an automatically created tracking bug! It was created to ensure
that one or more security vulnerabilities are fixed in affected versions
of Fedora EPEL.
For comments that are specific to the vulnerability please use bugs filed
against the "Security Response" product referenced in the "Blocks" field.
For more information see:
http://fedoraproject.org/wiki/Security/TrackingBugs
When creating a Bodhi update request, please use the bodhi submission link
noted in the next comment(s). This will include the bug IDs of this
tracking bug as well as the relevant top-level CVE bugs.
Please also mention the CVE IDs being fixed in the RPM changelog and the
Bodhi notes fiel
Bugzilla
CVE-2014-0092 mingw-gnutls: gnutls: incorrect error handling in certificate verification (GNUTLS-SA-2014-2) [fedora-all]
bugzilla·2014-03-03·CVSS 5.8
CVE-2014-0092 [MEDIUM] CVE-2014-0092 mingw-gnutls: gnutls: incorrect error handling in certificate verification (GNUTLS-SA-2014-2) [fedora-all]
CVE-2014-0092 mingw-gnutls: gnutls: incorrect error handling in certificate verification (GNUTLS-SA-2014-2) [fedora-all]
This is an automatically created tracking bug! It was created to ensure
that one or more security vulnerabilities are fixed in affected versions
of Fedora.
For comments that are specific to the vulnerability please use bugs filed
against the "Security Response" product referenced in the "Blocks" field.
For more information see:
http://fedoraproject.org/wiki/Security/TrackingBugs
When creating a Bodhi update request, please use the bodhi submission link
noted in the next comment(s). This will include the bug IDs of this
tracking bug as well as the relevant top-level CVE bugs.
Please also mention the CVE IDs being fixed in the RPM changelog and the
Bodhi notes field w
Bugzilla
CVE-2014-0092 gnutls: incorrect error handling in certificate verification (GNUTLS-SA-2014-2)
bugzilla·2014-02-25·CVSS 5.8
CVE-2014-0092 [MEDIUM] CVE-2014-0092 gnutls: incorrect error handling in certificate verification (GNUTLS-SA-2014-2)
CVE-2014-0092 gnutls: incorrect error handling in certificate verification (GNUTLS-SA-2014-2)
It was discovered that GnuTLS X.509 certificate verification code failed to properly handle certain errors that can occur during the certificate verification. When such errors are encountered, GnuTLS would report successful verification of the certificate, even though verification should end with failure. A specially-crafted certificate can be accepted by GnuTLS as valid even if it wasn't issued by any trusted Certificate Authority. This can be used to perform man-in-the-middle attacks against applications using GnuTLS.
Discussion:
Acknowledgment:
This issue was discovered by Nikos Mavrogiannopoulos of the Red Hat Security Technologies Team.
---
Created attachment 867911
Patch from Nikos
--
http://gnutls.org/security.html#GNUTLS-SA-2014-2http://lists.opensuse.org/opensuse-security-announce/2014-03/msg00000.htmlhttp://lists.opensuse.org/opensuse-security-announce/2014-03/msg00001.htmlhttp://lists.opensuse.org/opensuse-security-announce/2014-03/msg00002.htmlhttp://lists.opensuse.org/opensuse-security-announce/2014-03/msg00003.htmlhttp://lists.opensuse.org/opensuse-security-announce/2014-03/msg00004.htmlhttp://lists.opensuse.org/opensuse-security-announce/2014-03/msg00005.htmlhttp://lists.opensuse.org/opensuse-security-announce/2014-03/msg00006.htmlhttp://lists.opensuse.org/opensuse-security-announce/2014-03/msg00007.htmlhttp://lists.opensuse.org/opensuse-security-announce/2014-03/msg00009.htmlhttp://lists.opensuse.org/opensuse-security-announce/2014-03/msg00020.htmlhttp://rhn.redhat.com/errata/RHSA-2014-0246.htmlhttp://rhn.redhat.com/errata/RHSA-2014-0247.htmlhttp://rhn.redhat.com/errata/RHSA-2014-0288.htmlhttp://rhn.redhat.com/errata/RHSA-2014-0339.htmlhttp://secunia.com/advisories/56933http://secunia.com/advisories/57103http://secunia.com/advisories/57204http://secunia.com/advisories/57254http://secunia.com/advisories/57260http://secunia.com/advisories/57274http://secunia.com/advisories/57321http://www.debian.org/security/2014/dsa-2869http://www.securityfocus.com/bid/65919http://www.ubuntu.com/usn/USN-2127-1https://bugzilla.redhat.com/show_bug.cgi?id=1069865http://gnutls.org/security.html#GNUTLS-SA-2014-2http://lists.opensuse.org/opensuse-security-announce/2014-03/msg00000.htmlhttp://lists.opensuse.org/opensuse-security-announce/2014-03/msg00001.htmlhttp://lists.opensuse.org/opensuse-security-announce/2014-03/msg00002.htmlhttp://lists.opensuse.org/opensuse-security-announce/2014-03/msg00003.htmlhttp://lists.opensuse.org/opensuse-security-announce/2014-03/msg00004.htmlhttp://lists.opensuse.org/opensuse-security-announce/2014-03/msg00005.htmlhttp://lists.opensuse.org/opensuse-security-announce/2014-03/msg00006.htmlhttp://lists.opensuse.org/opensuse-security-announce/2014-03/msg00007.htmlhttp://lists.opensuse.org/opensuse-security-announce/2014-03/msg00009.htmlhttp://lists.opensuse.org/opensuse-security-announce/2014-03/msg00020.htmlhttp://rhn.redhat.com/errata/RHSA-2014-0246.htmlhttp://rhn.redhat.com/errata/RHSA-2014-0247.htmlhttp://rhn.redhat.com/errata/RHSA-2014-0288.htmlhttp://rhn.redhat.com/errata/RHSA-2014-0339.htmlhttp://secunia.com/advisories/56933http://secunia.com/advisories/57103http://secunia.com/advisories/57204http://secunia.com/advisories/57254http://secunia.com/advisories/57260http://secunia.com/advisories/57274http://secunia.com/advisories/57321http://www.debian.org/security/2014/dsa-2869http://www.securityfocus.com/bid/65919http://www.ubuntu.com/usn/USN-2127-1https://bugzilla.redhat.com/show_bug.cgi?id=1069865
2014-03-07
Published