Debian Gnutls28 vulnerabilities

CVE-2016-7444 [HIGH] CVE-2016-7444: gnutls28 - The gnutls_ocsp_resp_check_crt function in lib/x509/ocsp.c in GnuTLS before 3.4.... The gnutls_ocsp_resp_check_crt function in lib/x509/ocsp.c in GnuTLS before 3.4.15 and 3.5.x before 3.5.4 does not verify the serial length of an OCSP response, which might allow remote attackers to bypass an intended certificate validation mechanism via vectors involving trailing bytes left by gnutls_malloc. Scope: local bookworm: resolved (fixed in 3.5.3-4) bullsey

CVE-2017-7869 [HIGH] CVE-2017-7869: gnutls28 - GnuTLS before 2017-02-20 has an out-of-bounds write caused by an integer overflo... GnuTLS before 2017-02-20 has an out-of-bounds write caused by an integer overflow and heap-based buffer overflow related to the cdk_pkt_read function in opencdk/read-packet.c. This issue (which is a subset of the vendor's GNUTLS-SA-2017-3 report) is fixed in 3.5.10. Scope: local bookworm: resolved (fixed in 3.5.8-4) bullseye: resolved (fixed in 3.5.8-4) forky: resolv

CVE-2017-5335 [HIGH] CVE-2017-5335: gnutls28 - The stream reading functions in lib/opencdk/read-packet.c in GnuTLS before 3.3.2... The stream reading functions in lib/opencdk/read-packet.c in GnuTLS before 3.3.26 and 3.5.x before 3.5.8 allow remote attackers to cause a denial of service (out-of-memory error and crash) via a crafted OpenPGP certificate. Scope: local bookworm: resolved (fixed in 3.5.8-1) bullseye: resolved (fixed in 3.5.8-1) forky: resolved (fixed in 3.5.8-1) sid: resolved (fixed

CVE-2020-24659 [HIGH] CVE-2020-24659: gnutls28 - An issue was discovered in GnuTLS before 3.6.15. A server can trigger a NULL poi... An issue was discovered in GnuTLS before 3.6.15. A server can trigger a NULL pointer dereference in a TLS 1.3 client if a no_renegotiation alert is sent with unexpected timing, and then an invalid second handshake occurs. The crash happens in the application's error handling path, where the gnutls_deinit function is called after detecting a handshake failure. Scope

CVE-2019-3836 [MEDIUM] CVE-2019-3836: gnutls28 - It was discovered in gnutls before version 3.6.7 upstream that there is an unini... It was discovered in gnutls before version 3.6.7 upstream that there is an uninitialized pointer access in gnutls versions 3.6.3 or later which can be triggered by certain post-handshake messages. Scope: local bookworm: resolved (fixed in 3.6.7-2) bullseye: resolved (fixed in 3.6.7-2) forky: resolved (fixed in 3.6.7-2) sid: resolved (fixed in 3.6.7-2) trixie: resol

CVE-2015-0294 [HIGH] CVE-2015-0294: gnutls28 - GnuTLS before 3.3.13 does not validate that the signature algorithms match when ... GnuTLS before 3.3.13 does not validate that the signature algorithms match when importing a certificate. Scope: local bookworm: resolved (fixed in 3.3.8-6) bullseye: resolved (fixed in 3.3.8-6) forky: resolved (fixed in 3.3.8-6) sid: resolved (fixed in 3.3.8-6) trixie: resolved (fixed in 3.3.8-6)

CVE-2017-7507 [HIGH] CVE-2017-7507: gnutls28 - GnuTLS version 3.5.12 and earlier is vulnerable to a NULL pointer dereference wh... GnuTLS version 3.5.12 and earlier is vulnerable to a NULL pointer dereference while decoding a status response TLS extension with valid contents. This could lead to a crash of the GnuTLS server application. Scope: local bookworm: resolved (fixed in 3.5.8-6) bullseye: resolved (fixed in 3.5.8-6) forky: resolved (fixed in 3.5.8-6) sid: resolved (fixed in 3.5.8-6) trixi

CVE-2022-2509 [HIGH] CVE-2022-2509: gnutls28 - A vulnerability found in gnutls. This security flaw happens because of a double ... A vulnerability found in gnutls. This security flaw happens because of a double free error occurs during verification of pkcs7 signatures in gnutls_pkcs7_verify function. Scope: local bookworm: resolved (fixed in 3.7.7-1) bullseye: resolved (fixed in 3.7.1-5+deb11u2) forky: resolved (fixed in 3.7.7-1) sid: resolved (fixed in 3.7.7-1) trixie: resolved (fixed in 3.7.7-

CVE-2025-6395 [MEDIUM] CVE-2025-6395: gnutls28 - A NULL pointer dereference flaw was found in the GnuTLS software in _gnutls_figu... A NULL pointer dereference flaw was found in the GnuTLS software in _gnutls_figure_common_ciphersuite(). Scope: local bookworm: resolved (fixed in 3.7.9-2+deb12u5) bullseye: resolved (fixed in 3.7.1-5+deb11u8) forky: resolved (fixed in 3.8.9-3) sid: resolved (fixed in 3.8.9-3) trixie: resolved (fixed in 3.8.9-3)

CVE-2015-3308 [HIGH] CVE-2015-3308: gnutls28 - Double free vulnerability in lib/x509/x509_ext.c in GnuTLS before 3.3.14 allows ... Double free vulnerability in lib/x509/x509_ext.c in GnuTLS before 3.3.14 allows remote attackers to cause a denial of service or possibly have unspecified other impact via a crafted CRL distribution point. Scope: local bookworm: resolved (fixed in 3.3.8-7) bullseye: resolved (fixed in 3.3.8-7) forky: resolved (fixed in 3.3.8-7) sid: resolved (fixed in 3.3.8-7) trixie

CVE-2015-6251 [MEDIUM] CVE-2015-6251: gnutls28 - Double free vulnerability in GnuTLS before 3.3.17 and 3.4.x before 3.4.4 allows ... Double free vulnerability in GnuTLS before 3.3.17 and 3.4.x before 3.4.4 allows remote attackers to cause a denial of service via a long DistinguishedName (DN) entry in a certificate. Scope: local bookworm: resolved (fixed in 3.3.17-1) bullseye: resolved (fixed in 3.3.17-1) forky: resolved (fixed in 3.3.17-1) sid: resolved (fixed in 3.3.17-1) trixie: resolved (fixe

CVE-2018-10845 [MEDIUM] CVE-2018-10845: gnutls28 - It was found that the GnuTLS implementation of HMAC-SHA-384 was vulnerable to a ... It was found that the GnuTLS implementation of HMAC-SHA-384 was vulnerable to a Lucky thirteen style attack. Remote attackers could use this flaw to conduct distinguishing attacks and plain text recovery attacks via statistical analysis of timing data using crafted packets. Scope: local bookworm: resolved (fixed in 3.5.19-1) bullseye: resolved (fixed in 3.5.19-1)

CVE-2018-10844 [MEDIUM] CVE-2018-10844: gnutls28 - It was found that the GnuTLS implementation of HMAC-SHA-256 was vulnerable to a ... It was found that the GnuTLS implementation of HMAC-SHA-256 was vulnerable to a Lucky thirteen style attack. Remote attackers could use this flaw to conduct distinguishing attacks and plaintext-recovery attacks via statistical analysis of timing data using crafted packets. Scope: local bookworm: resolved (fixed in 3.5.19-1) bullseye: resolved (fixed in 3.5.19-1)

CVE-2014-1959 [MEDIUM] CVE-2014-1959: gnutls28 - lib/x509/verify.c in GnuTLS before 3.1.21 and 3.2.x before 3.2.11 treats version... lib/x509/verify.c in GnuTLS before 3.1.21 and 3.2.x before 3.2.11 treats version 1 X.509 certificates as intermediate CAs, which allows remote attackers to bypass intended restrictions by leveraging a X.509 V1 certificate from a trusted CA to issue new certificates. Scope: local bookworm: resolved (fixed in 3.2.11-1) bullseye: resolved (fixed in 3.2.11-1) forky: re

CVE-2021-4209 [MEDIUM] CVE-2021-4209: gnutls28 - A NULL pointer dereference flaw was found in GnuTLS. As Nettle's hash update fun... A NULL pointer dereference flaw was found in GnuTLS. As Nettle's hash update functions internally call memcpy, providing zero-length input may cause undefined behavior. This flaw leads to a denial of service after authentication in rare circumstances. Scope: local bookworm: resolved (fixed in 3.7.3-2) bullseye: resolved (fixed in 3.7.1-5+deb11u1) forky: resolved (f

CVE-2025-14831 [MEDIUM] CVE-2025-14831: gnutls28 - A flaw was found in GnuTLS. This vulnerability allows a denial of service (DoS) ... A flaw was found in GnuTLS. This vulnerability allows a denial of service (DoS) by excessive CPU (Central Processing Unit) and memory consumption via specially crafted malicious certificates containing a large number of name constraints and subject alternative names (SANs). Scope: local bookworm: resolved (fixed in 3.7.9-2+deb12u6) bullseye: resolved (fixed in 3.

CVE-2013-0169 [LOW] CVE-2013-0169: bouncycastle - The TLS protocol 1.1 and 1.2 and the DTLS protocol 1.0 and 1.2, as used in OpenS... The TLS protocol 1.1 and 1.2 and the DTLS protocol 1.0 and 1.2, as used in OpenSSL, OpenJDK, PolarSSL, and other products, do not properly consider timing side-channel attacks on a MAC check requirement during the processing of malformed CBC padding, which allows remote attackers to conduct distinguishing attacks and plaintext-recovery attacks via statistical anal

CVE-2015-7575 [MEDIUM] CVE-2015-7575: gnutls28 - Mozilla Network Security Services (NSS) before 3.20.2, as used in Mozilla Firefo... Mozilla Network Security Services (NSS) before 3.20.2, as used in Mozilla Firefox before 43.0.2 and Firefox ESR 38.x before 38.5.2, does not reject MD5 signatures in Server Key Exchange messages in TLS 1.2 Handshake Protocol traffic, which makes it easier for man-in-the-middle attackers to spoof servers by triggering a collision. Scope: local bookworm: resolved (fi

CVE-2024-12243 [MEDIUM] CVE-2024-12243: gnutls28 - A flaw was found in GnuTLS, which relies on libtasn1 for ASN.1 data processing. ... A flaw was found in GnuTLS, which relies on libtasn1 for ASN.1 data processing. Due to an inefficient algorithm in libtasn1, decoding certain DER-encoded certificate data can take excessive time, leading to increased resource consumption. This flaw allows a remote attacker to send a specially crafted certificate, causing GnuTLS to become unresponsive or slow, res

CVE-2025-32989 [MEDIUM] CVE-2025-32989: gnutls28 - A heap-buffer-overread vulnerability was found in GnuTLS in how it handles the C... A heap-buffer-overread vulnerability was found in GnuTLS in how it handles the Certificate Transparency (CT) Signed Certificate Timestamp (SCT) extension during X.509 certificate parsing. This flaw allows a malicious user to create a certificate containing a malformed SCT extension (OID 1.3.6.1.4.1.11129.2.4.2) that contains sensitive data. This issue leads to th