CVE-2014-0092
Fixed in a distro release EPSS 30%
lib/x509/verify.c in GnuTLS before 3.1.22 and 3.2.x before 3.2.12 does not properly handle unspecified errors when verifying X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers via a crafted certificate.
Products: gnutls
Distro releases
| Release | Package | Fixed in |
|---|---|---|
| Debian 12 | gnutls28 | 3.2.11-2 |
| Debian 13 | gnutls28 | 3.2.11-2 |
| Debian 14 | gnutls28 | 3.2.11-2 |
| Debian 6.0 | gnutls26 | 2.8.6-1+squeeze3 |
| Debian 7 | gnutls26 | 2.12.20-8+deb7u1 |
| Red Hat Enterprise Linux 5 | gnutls | 0:1.4.1-14.el5_10 |
| Red Hat Enterprise Linux 5 | gnutls-debuginfo | 0:1.4.1-14.el5_10 |
| Red Hat Enterprise Linux 5 | gnutls-devel | 0:1.4.1-14.el5_10 |
| Red Hat Enterprise Linux 5 | gnutls-utils | 0:1.4.1-14.el5_10 |
| Red Hat Enterprise Linux 6 | gnutls | 0:2.8.5-13.el6_5 |
| Red Hat Enterprise Linux 6 | gnutls-debuginfo | 0:2.8.5-13.el6_5 |
| Red Hat Enterprise Linux 6 | gnutls-devel | 0:2.8.5-13.el6_5 |
| Red Hat Enterprise Linux 6 | gnutls-guile | 0:2.8.5-13.el6_5 |
| Red Hat Enterprise Linux 6 | gnutls-utils | 0:2.8.5-13.el6_5 |
| Red Hat Enterprise Linux 6 | rhev-hypervisor6 | 0:6.5-20140324.0.el6ev |
| Red Hat rhel els 4 | gnutls | 0:1.0.20-5.el4 |
| Red Hat rhel els 4 | gnutls-debuginfo | 0:1.0.20-5.el4 |
| Red Hat rhel els 4 | gnutls-devel | 0:1.0.20-5.el4 |
| Red Hat rhel eus 5.9 | gnutls | 0:1.4.1-10.el5_9.3 |
| Red Hat rhel eus 5.9 | gnutls-debuginfo | 0:1.4.1-10.el5_9.3 |
| Red Hat rhel eus 5.9 | gnutls-devel | 0:1.4.1-10.el5_9.3 |
| Red Hat rhel eus 5.9 | gnutls-utils | 0:1.4.1-10.el5_9.3 |
| Red Hat rhel eus 6.3 | gnutls | 0:2.8.5-7.el6_3.2 |
| Red Hat rhel eus 6.3 | gnutls-debuginfo | 0:2.8.5-7.el6_3.2 |
| Red Hat rhel eus 6.3 | gnutls-devel | 0:2.8.5-7.el6_3.2 |
| Red Hat rhel eus 6.3 | gnutls-guile | 0:2.8.5-7.el6_3.2 |
| Red Hat rhel eus 6.3 | gnutls-utils | 0:2.8.5-7.el6_3.2 |
| Red Hat rhel eus 6.4 | gnutls | 0:2.8.5-10.el6_4.3 |
| Red Hat rhel eus 6.4 | gnutls-debuginfo | 0:2.8.5-10.el6_4.3 |
| Red Hat rhel eus 6.4 | gnutls-devel | 0:2.8.5-10.el6_4.3 |
| Red Hat rhel eus 6.4 | gnutls-guile | 0:2.8.5-10.el6_4.3 |
| Red Hat rhel eus 6.4 | gnutls-utils | 0:2.8.5-10.el6_4.3 |
| Red Hat rhel mission critical 5.3 | gnutls | 0:1.4.1-3.el5_3.6 |
| Red Hat rhel mission critical 5.3 | gnutls-debuginfo | 0:1.4.1-3.el5_3.6 |
| Red Hat rhel mission critical 5.3 | gnutls-devel | 0:1.4.1-3.el5_3.6 |
| Red Hat rhel mission critical 5.3 | gnutls-utils | 0:1.4.1-3.el5_3.6 |
| Red Hat rhel mission critical 5.6 | gnutls | 0:1.4.1-7.el5_6.1 |
| Red Hat rhel mission critical 5.6 | gnutls-debuginfo | 0:1.4.1-7.el5_6.1 |
| Red Hat rhel mission critical 5.6 | gnutls-devel | 0:1.4.1-7.el5_6.1 |
| Red Hat rhel mission critical 5.6 | gnutls-utils | 0:1.4.1-7.el5_6.1 |
| Red Hat rhel mission critical 6.2 | gnutls | 0:2.8.5-4.el6_2.3 |
| Red Hat rhel mission critical 6.2 | gnutls-debuginfo | 0:2.8.5-4.el6_2.3 |
| Red Hat rhel mission critical 6.2 | gnutls-devel | 0:2.8.5-4.el6_2.3 |
| Red Hat rhel mission critical 6.2 | gnutls-guile | 0:2.8.5-4.el6_2.3 |
| Red Hat rhel mission critical 6.2 | gnutls-utils | 0:2.8.5-4.el6_2.3 |
| Ubuntu 14.04 LTS | gnutls26 | 2.12.23-12ubuntu2 |
| openSUSE Tumbleweed | gnutls | 3.4.15-1.1 |