CVE-2014-1959
published 2014-03-07CVE-2014-1959: lib/x509/verify.c in GnuTLS before 3.1.21 and 3.2.x before 3.2.11 treats version 1 X.509 certificates as intermediate CAs, which allows remote attackers to…
PriorityP431medium5.8CVSS 2.0
AVNACMAuNCPIPAN
EPSS
3.42%
87.6th percentile
lib/x509/verify.c in GnuTLS before 3.1.21 and 3.2.x before 3.2.11 treats version 1 X.509 certificates as intermediate CAs, which allows remote attackers to bypass intended restrictions by leveraging a X.509 V1 certificate from a trusted CA to issue new certificates.
Affected
41 ranges· showing 25
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| debian | gnutls28 | < gnutls28 3.2.11-1 (bookworm) | gnutls28 3.2.11-1 (bookworm) |
| debian | gnutls28 | — | — |
| gnu | gnutls | <= 2.7.5 | — |
| gnu | gnutls | <= 3.1.20 | — |
| gnu | gnutls | <= 3.2.10 | — |
| gnu | gnutls | — | — |
| gnu | gnutls | — | — |
| gnu | gnutls | — | — |
| gnu | gnutls | — | — |
| gnu | gnutls | — | — |
| gnu | gnutls | — | — |
| gnu | gnutls | — | — |
| gnu | gnutls | — | — |
| gnu | gnutls | — | — |
| gnu | gnutls | — | — |
| gnu | gnutls | — | — |
| gnu | gnutls | — | — |
| gnu | gnutls | — | — |
| gnu | gnutls | — | — |
| gnu | gnutls | — | — |
| gnu | gnutls | — | — |
| gnu | gnutls | — | — |
| gnu | gnutls | — | — |
| gnu | gnutls | — | — |
| gnu | gnutls | — | — |
CVSS provenance
nvdv2.05.8MEDIUMAV:N/AC:M/Au:N/C:P/I:P/A:N
osv5.8MEDIUM
vendor_debian5.8MEDIUM
vendor_redhat5.8MEDIUM
Stop checking back — get the weekly exploitation signal.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
Ubuntu
GnuTLS vulnerability
vendor_ubuntu·2014-02-25
CVE-2014-1959 GnuTLS vulnerability
Title: GnuTLS vulnerability
Summary: GnuTLS incorrectly validated certain intermediate certificates.
Suman Jana discovered that GnuTLS incorrectly handled version 1
intermediate certificates. This resulted in them being considered to be a
valid CA certificate by default, which was contrary to documented
behaviour.
Instructions: In general, a standard system update will make all the necessary changes.
Red Hat
gnutls: incorrect handling of V1 intermediate certificates (GNUTLS-SA-2014-1)
vendor_redhat·2014-02-12·CVSS 5.8
CVE-2014-1959 [MEDIUM] gnutls: incorrect handling of V1 intermediate certificates (GNUTLS-SA-2014-1)
gnutls: incorrect handling of V1 intermediate certificates (GNUTLS-SA-2014-1)
lib/x509/verify.c in GnuTLS before 3.1.21 and 3.2.x before 3.2.11 treats version 1 X.509 certificates as intermediate CAs, which allows remote attackers to bypass intended restrictions by leveraging a X.509 V1 certificate from a trusted CA to issue new certificates.
Statement: Not vulnerable. This issue did not affect the versions of gnutls as shipped with Red Hat Enterprise Linux 5 and 6.
Package: gnutls (Red Hat Enterprise Linux 5) - Not affected
Package: gnutls (Red Hat Enterprise Linux 6) - Not affected
Package: mingw32-gnutls (Red Hat Enterprise Linux 6) - Not affected
Package: gnutls (Red Hat Enterprise Linux 7) - Not affected
Debian
CVE-2014-1959: gnutls28 - lib/x509/verify.c in GnuTLS before 3.1.21 and 3.2.x before 3.2.11 treats version...
vendor_debian·2014·CVSS 5.8
CVE-2014-1959 [MEDIUM] CVE-2014-1959: gnutls28 - lib/x509/verify.c in GnuTLS before 3.1.21 and 3.2.x before 3.2.11 treats version...
lib/x509/verify.c in GnuTLS before 3.1.21 and 3.2.x before 3.2.11 treats version 1 X.509 certificates as intermediate CAs, which allows remote attackers to bypass intended restrictions by leveraging a X.509 V1 certificate from a trusted CA to issue new certificates.
Scope: local
bookworm: resolved (fixed in 3.2.11-1)
bullseye: resolved (fixed in 3.2.11-1)
forky: resolved (fixed in 3.2.11-1)
sid: resolved (fixed in 3.2.11-1)
trixie: resolved (fixed in 3.2.11-1)
Red Hat
gnutls: incorrect handling of V1 intermediate certificates
vendor_redhat·2009-01-09·CVSS 5.8
CVE-2009-5138 [MEDIUM] CWE-295 gnutls: incorrect handling of V1 intermediate certificates
gnutls: incorrect handling of V1 intermediate certificates
GnuTLS before 2.7.6, when the GNUTLS_VERIFY_ALLOW_X509_V1_CA_CRT flag is not enabled, treats version 1 X.509 certificates as intermediate CAs, which allows remote attackers to bypass intended restrictions by leveraging a X.509 V1 certificate from a trusted CA to issue new certificates, a different vulnerability than CVE-2014-1959.
Statement: This issue did not affect the versions of gnutls as shipped with Red Hat Enterprise Linux 6.
Package: gnutls (Red Hat Enterprise Linux 6) - Not affected
Package: mingw32-gnutls (Red Hat Enterprise Linux 6) - Will not fix
Package: gnutls (Red Hat Enterprise Linux 7) - Not affected
Debian
CVE-2009-5138: gnutls28 - GnuTLS before 2.7.6, when the GNUTLS_VERIFY_ALLOW_X509_V1_CA_CRT flag is not ena...
vendor_debian·2009·CVSS 5.8
CVE-2009-5138 [MEDIUM] CVE-2009-5138: gnutls28 - GnuTLS before 2.7.6, when the GNUTLS_VERIFY_ALLOW_X509_V1_CA_CRT flag is not ena...
GnuTLS before 2.7.6, when the GNUTLS_VERIFY_ALLOW_X509_V1_CA_CRT flag is not enabled, treats version 1 X.509 certificates as intermediate CAs, which allows remote attackers to bypass intended restrictions by leveraging a X.509 V1 certificate from a trusted CA to issue new certificates, a different vulnerability than CVE-2014-1959.
Scope: local
bookworm: resolved
bullseye: resolved
forky: resolved
sid: resolved
trixie: resolved
GHSA
GHSA-pcqq-cwj9-7ggm: lib/x509/verify
ghsa_unreviewed·2022-05-17
CVE-2014-1959 [MEDIUM] GHSA-pcqq-cwj9-7ggm: lib/x509/verify
lib/x509/verify.c in GnuTLS before 3.1.21 and 3.2.x before 3.2.11 treats version 1 X.509 certificates as intermediate CAs, which allows remote attackers to bypass intended restrictions by leveraging a X.509 V1 certificate from a trusted CA to issue new certificates.
GHSA
GHSA-754r-c6vv-mv5g: GnuTLS before 2
ghsa_unreviewed·2022-05-02·CVSS 5.8
CVE-2009-5138 [MEDIUM] GHSA-754r-c6vv-mv5g: GnuTLS before 2
GnuTLS before 2.7.6, when the GNUTLS_VERIFY_ALLOW_X509_V1_CA_CRT flag is not enabled, treats version 1 X.509 certificates as intermediate CAs, which allows remote attackers to bypass intended restrictions by leveraging a X.509 V1 certificate from a trusted CA to issue new certificates, a different vulnerability than CVE-2014-1959.
OSV
CVE-2014-1959: lib/x509/verify
osv·2014-03-07·CVSS 5.8
CVE-2014-1959 [MEDIUM] CVE-2014-1959: lib/x509/verify
lib/x509/verify.c in GnuTLS before 3.1.21 and 3.2.x before 3.2.11 treats version 1 X.509 certificates as intermediate CAs, which allows remote attackers to bypass intended restrictions by leveraging a X.509 V1 certificate from a trusted CA to issue new certificates.
No detection rules found.
No public exploits indexed.
Bugzilla
CVE-2009-5138 gnutls: incorrect handling of V1 intermediate certificates
bugzilla·2014-02-24·CVSS 5.8
CVE-2009-5138 [MEDIUM] CVE-2009-5138 gnutls: incorrect handling of V1 intermediate certificates
CVE-2009-5138 gnutls: incorrect handling of V1 intermediate certificates
While investigating GnuTLS issue CVE-2014-1959 (bug 1065092), it was discovered that older versions of GnuTLS were affected by the same problem, with a different root cause. When using default certificate verification settings, GnuTLS accepted version 1 X.509 certificates as intermediate CAs. An attacker able to obtain a V1 certificate from a CA trusted by application could generate certificates for other hosts or users that would be accepted by GnuTLS.
This issue affected GnuTLS versions before 2.7.6. Problem was reported in the following post:
http://thread.gmane.org/gmane.comp.encryption.gpg.gnutls.devel/3351/focus=3361
and fixed upstream via:
https://gitorious.org/gnutls/gnutls/commit/c8dcbedd1fdc312f5b1a70fc
Bugzilla
CVE-2014-1959 mingw-gnutls: gnutls: certificate verification flaw (GNUTLS-SA-2014-1) [fedora-all]
bugzilla·2014-02-13·CVSS 5.8
CVE-2014-1959 [MEDIUM] CVE-2014-1959 mingw-gnutls: gnutls: certificate verification flaw (GNUTLS-SA-2014-1) [fedora-all]
CVE-2014-1959 mingw-gnutls: gnutls: certificate verification flaw (GNUTLS-SA-2014-1) [fedora-all]
This is an automatically created tracking bug! It was created to ensure
that one or more security vulnerabilities are fixed in affected versions
of Fedora.
For comments that are specific to the vulnerability please use bugs filed
against the "Security Response" product referenced in the "Blocks" field.
For more information see:
http://fedoraproject.org/wiki/Security/TrackingBugs
When creating a Bodhi update request, please use the bodhi submission link
noted in the next comment(s). This will include the bug IDs of this
tracking bug as well as the relevant top-level CVE bugs.
Please also mention the CVE IDs being fixed in the RPM changelog and the
Bodhi notes field when available.
Please
Bugzilla
CVE-2014-1959 gnutls: incorrect handling of V1 intermediate certificates (GNUTLS-SA-2014-1)
bugzilla·2014-02-13·CVSS 5.8
CVE-2014-1959 [MEDIUM] CVE-2014-1959 gnutls: incorrect handling of V1 intermediate certificates (GNUTLS-SA-2014-1)
CVE-2014-1959 gnutls: incorrect handling of V1 intermediate certificates (GNUTLS-SA-2014-1)
It was reported [1] that a version 1 intermediate certificate would be considered as a CA certificate by GnuTLS by default. This certificate verification behaviour deviates from the documented behaviour.
Upstream notes that this only affects individuals or organizations who have a CA that issues X.509 version 1 certificates in their trusted list.
This has been fixed upstream [2] in version 3.1.21 and 3.2.11.
At a quick look at the code of GnuTLS 2.8.5, it is affected. 1.4.1 looks affected to me as well.
[1] http://www.gnutls.org/security.html
[2] https://www.gitorious.org/gnutls/gnutls/commit/b1abfe3d18
Discussion:
Created mingw-gnutls tracking bugs for this issue:
Affects: fedora-all [bug
Bugzilla
CVE-2014-1959 mingw32-gnutls: gnutls: certificate verification flaw (GNUTLS-SA-2014-1) [epel-5]
bugzilla·2014-02-13·CVSS 5.8
CVE-2014-1959 [MEDIUM] CVE-2014-1959 mingw32-gnutls: gnutls: certificate verification flaw (GNUTLS-SA-2014-1) [epel-5]
CVE-2014-1959 mingw32-gnutls: gnutls: certificate verification flaw (GNUTLS-SA-2014-1) [epel-5]
This is an automatically created tracking bug! It was created to ensure
that one or more security vulnerabilities are fixed in affected versions
of Fedora EPEL.
For comments that are specific to the vulnerability please use bugs filed
against the "Security Response" product referenced in the "Blocks" field.
For more information see:
http://fedoraproject.org/wiki/Security/TrackingBugs
When creating a Bodhi update request, please use the bodhi submission link
noted in the next comment(s). This will include the bug IDs of this
tracking bug as well as the relevant top-level CVE bugs.
Please also mention the CVE IDs being fixed in the RPM changelog and the
Bodhi notes field when available.
epel
Bugzilla
CVE-2014-1959 gnutls: certificate verification flaw (GNUTLS-SA-2014-1) [fedora-all]
bugzilla·2014-02-13·CVSS 5.8
CVE-2014-1959 [MEDIUM] CVE-2014-1959 gnutls: certificate verification flaw (GNUTLS-SA-2014-1) [fedora-all]
CVE-2014-1959 gnutls: certificate verification flaw (GNUTLS-SA-2014-1) [fedora-all]
This is an automatically created tracking bug! It was created to ensure
that one or more security vulnerabilities are fixed in affected versions
of Fedora.
For comments that are specific to the vulnerability please use bugs filed
against the "Security Response" product referenced in the "Blocks" field.
For more information see:
http://fedoraproject.org/wiki/Security/TrackingBugs
When creating a Bodhi update request, please use the bodhi submission link
noted in the next comment(s). This will include the bug IDs of this
tracking bug as well as the relevant top-level CVE bugs.
Please also mention the CVE IDs being fixed in the RPM changelog and the
Bodhi notes field when available.
Please note: this iss
http://seclists.org/oss-sec/2014/q1/344http://seclists.org/oss-sec/2014/q1/345http://www.debian.org/security/2014/dsa-2866http://www.gnutls.org/security.htmlhttp://www.securityfocus.com/bid/65559http://www.ubuntu.com/usn/USN-2121-1https://www.gitorious.org/gnutls/gnutls/commit/b1abfe3d182d68539900092eb42fc62cf1bb7e7chttp://seclists.org/oss-sec/2014/q1/344http://seclists.org/oss-sec/2014/q1/345http://www.debian.org/security/2014/dsa-2866http://www.gnutls.org/security.htmlhttp://www.securityfocus.com/bid/65559http://www.ubuntu.com/usn/USN-2121-1https://www.gitorious.org/gnutls/gnutls/commit/b1abfe3d182d68539900092eb42fc62cf1bb7e7c
2014-03-07
Published