CVE-2015-8313
Fixed in a distro release EPSS 2%
GnuTLS incorrectly validates the first byte of padding in CBC modes
Products: gnutls, debian_linux
Distro releases
| Release | Package | Fixed in |
|---|---|---|
| Debian 6.0 | gnutls26 | 2.8.6-1+squeeze6 |
| Debian 7 | gnutls26 | 2.12.20-8+deb7u4 |
| SUSE Linux Enterprise Desktop 11 SP3 | gnutls | 2.4.1-24.39.60.1 |
| SUSE Linux Enterprise Desktop 11 SP4 | gnutls | 2.4.1-24.39.60.1 |
| SUSE Linux Enterprise High Availability Extension 11 SP3 | gnutls | 2.4.1-24.39.60.1 |
| SUSE Linux Enterprise High Availability Extension 11 SP4 | gnutls | 2.4.1-24.39.60.1 |
| SUSE Linux Enterprise Server 11 SP3 | gnutls | 2.4.1-24.39.60.1 |
| SUSE Linux Enterprise Server 11 SP3-TERADATA | gnutls | 2.4.1-24.39.60.1 |
| SUSE Linux Enterprise Server 11 SP4 | gnutls | 2.4.1-24.39.60.1 |
| SUSE Linux Enterprise Server for SAP Applications 11 SP3 | gnutls | 2.4.1-24.39.60.1 |
| SUSE Linux Enterprise Server for SAP Applications 11 SP4 | gnutls | 2.4.1-24.39.60.1 |
| SUSE Linux Enterprise Software Development Kit 11 SP3 | gnutls | 2.4.1-24.39.60.1 |
| SUSE Linux Enterprise Software Development Kit 11 SP4 | gnutls | 2.4.1-24.39.60.1 |
| Ubuntu 14.04 LTS | gnutls26 | 2.12.23-12ubuntu2.3 |