CVE-2014-3465
Fixed in a distro release EPSS 4%
The gnutls_x509_dn_oid_name function in lib/x509/common.c in GnuTLS 3.0 before 3.1.20 and 3.2.x before 3.2.10 allows remote attackers to cause a denial of service (NULL pointer dereference) via a crafted X.509 certificate, related to a missing LDAP description for an OID when printing the DN.
Products: gnutls
Distro releases
| Release | Package | Fixed in |
|---|---|---|
| Debian 12 | gnutls28 | 3.2.10-1 |
| Debian 13 | gnutls28 | 3.2.10-1 |
| Debian 14 | gnutls28 | 3.2.10-1 |
| Red Hat Enterprise Linux 7 | gnutls | 0:3.1.18-9.el7_0 |
| Red Hat Enterprise Linux 7 | gnutls-c++ | 0:3.1.18-9.el7_0 |
| Red Hat Enterprise Linux 7 | gnutls-dane | 0:3.1.18-9.el7_0 |
| Red Hat Enterprise Linux 7 | gnutls-debuginfo | 0:3.1.18-9.el7_0 |
| Red Hat Enterprise Linux 7 | gnutls-devel | 0:3.1.18-9.el7_0 |
| Red Hat Enterprise Linux 7 | gnutls-utils | 0:3.1.18-9.el7_0 |