CVE-2015-6251
Fixed in a distro release EPSS 19%
Double free vulnerability in GnuTLS before 3.3.17 and 3.4.x before 3.4.4 allows remote attackers to cause a denial of service via a long DistinguishedName (DN) entry in a certificate.
Products: gnutls, debian_linux
Distro releases
| Release | Package | Fixed in |
|---|---|---|
| Debian 12 | gnutls28 | 3.3.17-1 |
| Debian 13 | gnutls28 | 3.3.17-1 |
| Debian 14 | gnutls28 | 3.3.17-1 |
| Debian 8 | gnutls28 | 3.3.8-6+deb8u2 |
| SUSE Linux Enterprise Desktop 12 | gnutls | 3.2.15-11.1 |
| SUSE Linux Enterprise Server 12 | gnutls | 3.2.15-11.1 |
| SUSE Linux Enterprise Server for SAP Applications 12 | gnutls | 3.2.15-11.1 |
| SUSE Linux Enterprise Software Development Kit 12 | gnutls | 3.2.15-11.1 |
| Ubuntu 16.04 LTS | gnutls28 | 3.3.15-5ubuntu2 |
| openSUSE Tumbleweed | gnutls | 3.4.15-1.1 |