CVE-2012-1573
Fixed in a distro release EPSS 4%
gnutls_cipher.c in libgnutls in GnuTLS before 2.12.17 and 3.x before 3.0.15 does not properly handle data encrypted with a block cipher, which allows remote attackers to cause a denial of service (heap memory corruption and application crash) via a crafted record, as demonstrated by a crafted GenericBlockCipher structure.
Products: gnutls
Distro releases
| Release | Package | Fixed in |
|---|---|---|
| Debian 12 | gnutls28 | 3.0.17-2 |
| Debian 13 | gnutls28 | 3.0.17-2 |
| Debian 14 | gnutls28 | 3.0.17-2 |
| Debian 6.0 | gnutls26 | 2.8.6-1+squeeze2 |
| Red Hat Enterprise Linux 5 | gnutls | 0:1.4.1-7.el5_8.2 |
| Red Hat Enterprise Linux 5 | gnutls-debuginfo | 0:1.4.1-7.el5_8.2 |
| Red Hat Enterprise Linux 5 | gnutls-devel | 0:1.4.1-7.el5_8.2 |
| Red Hat Enterprise Linux 5 | gnutls-utils | 0:1.4.1-7.el5_8.2 |
| Red Hat Enterprise Linux 6 | gnutls | 0:2.8.5-4.el6_2.2 |
| Red Hat Enterprise Linux 6 | gnutls-debuginfo | 0:2.8.5-4.el6_2.2 |
| Red Hat Enterprise Linux 6 | gnutls-devel | 0:2.8.5-4.el6_2.2 |
| Red Hat Enterprise Linux 6 | gnutls-guile | 0:2.8.5-4.el6_2.2 |
| Red Hat Enterprise Linux 6 | gnutls-utils | 0:2.8.5-4.el6_2.2 |
| Red Hat Enterprise Linux 6 | rhev-hypervisor6 | 0:6.2-20120423.1.el6_2 |
| Red Hat Enterprise Linux 6 | rhev-hypervisor6-tools | 0:6.2-20120423.1.el6_2 |
| openSUSE Tumbleweed | gnutls | 3.4.15-1.1 |