CVE-2013-2116
Fixed in a distro release EPSS 4%
The _gnutls_ciphertext2compressed function in lib/gnutls_cipher.c in GnuTLS 2.12.23 allows remote attackers to cause a denial of service (buffer over-read and crash) via a crafted padding length. NOTE: this might be due to an incorrect fix for CVE-2013-0169.
Products: gnutls
Distro releases
| Release | Package | Fixed in |
|---|---|---|
| Debian 7 | gnutls26 | 2.12.20-7 |
| Red Hat Enterprise Linux 5 | gnutls | 0:1.4.1-10.el5_9.2 |
| Red Hat Enterprise Linux 5 | gnutls-debuginfo | 0:1.4.1-10.el5_9.2 |
| Red Hat Enterprise Linux 5 | gnutls-devel | 0:1.4.1-10.el5_9.2 |
| Red Hat Enterprise Linux 5 | gnutls-utils | 0:1.4.1-10.el5_9.2 |
| Red Hat Enterprise Linux 6 | gnutls | 0:2.8.5-10.el6_4.2 |
| Red Hat Enterprise Linux 6 | gnutls-debuginfo | 0:2.8.5-10.el6_4.2 |
| Red Hat Enterprise Linux 6 | gnutls-devel | 0:2.8.5-10.el6_4.2 |
| Red Hat Enterprise Linux 6 | gnutls-guile | 0:2.8.5-10.el6_4.2 |
| Red Hat Enterprise Linux 6 | gnutls-utils | 0:2.8.5-10.el6_4.2 |
| Red Hat Enterprise Linux 6 | rhev-hypervisor6 | 0:6.4-20130709.0.el6_4 |