CVE-2024-0567
Fixed in a distro release EPSS 1%CVSS 7.5
A vulnerability was found in GnuTLS, where a cockpit (which uses gnuTLS) rejects a certificate chain with distributed trust. This issue occurs when validating a certificate chain with cockpit-certificate-ensure. This flaw allows an unauthenticated, remote client or attacker to initiate a denial of service attack.
Products: Red Hat Enterprise Linux 9, Red Hat Enterprise Linux 9.2 Extended Update Support, Red Hat RHODF-4.15-RHEL-9, Red Hat RHOL-5.8-RHEL-9, Red Hat Enterprise Linux 6, Red Hat Enterprise Linux 7, Red Hat Enterprise Linux 8, Red Hat OpenShift Container Platform 3.11, Siemens SIMATIC S7-1500 TM MFP - GNU/Linux subsystem
Distro releases
| Release | Package | Fixed in |
|---|---|---|
| AlmaLinux 9 | gnutls | 3.7.6-23.el9_3.3 |
| AlmaLinux 9 | gnutls-c++ | 3.7.6-23.el9_3.3 |
| AlmaLinux 9 | gnutls-dane | 3.7.6-23.el9_3.3 |
| AlmaLinux 9 | gnutls-devel | 3.7.6-23.el9_3.3 |
| AlmaLinux 9 | gnutls-utils | 3.7.6-23.el9_3.3 |
| Alpine 3.18 | gnutls | 3.8.3-r0 |
| Alpine 3.19 | gnutls | 3.8.3-r0 |
| Alpine 3.20 | gnutls | 3.8.3-r0 |
| Alpine 3.21 | gnutls | 3.8.3-r0 |
| Alpine 3.22 | gnutls | 3.8.3-r0 |
| Alpine 3.23 | gnutls | 3.8.3-r0 |
| Alpine 3.24 | gnutls | 3.8.3-r0 |
| Amazon Linux 2023 | gnutls | 3.8.0-378.amzn2023.0.4 |
| Amazon Linux 2023 | gnutls-c++ | 3.8.0-378.amzn2023.0.4 |
| Amazon Linux 2023 | gnutls-dane | 3.8.0-378.amzn2023.0.4 |
| Amazon Linux 2023 | gnutls-devel | 3.8.0-378.amzn2023.0.4 |
| Amazon Linux 2023 | gnutls-utils | 3.8.0-378.amzn2023.0.4 |
| Debian 12 | gnutls28 | 3.7.9-2+deb12u2 |
| Debian 13 | gnutls28 | 3.8.3-1 |
| Debian 14 | gnutls28 | 3.8.3-1 |
| Red Hat Enterprise Linux 9 | gnutls | 0:3.7.6-23.el9_3.3 |
| Red Hat Enterprise Linux 9 | gnutls-c++ | 0:3.7.6-23.el9_3.3 |
| Red Hat Enterprise Linux 9 | gnutls-c++-debuginfo | 0:3.7.6-23.el9_3.3 |
| Red Hat Enterprise Linux 9 | gnutls-dane | 0:3.7.6-23.el9_3.3 |
| Red Hat Enterprise Linux 9 | gnutls-dane-debuginfo | 0:3.7.6-23.el9_3.3 |
| Red Hat Enterprise Linux 9 | gnutls-debuginfo | 0:3.7.6-23.el9_3.3 |
| Red Hat Enterprise Linux 9 | gnutls-debugsource | 0:3.7.6-23.el9_3.3 |
| Red Hat Enterprise Linux 9 | gnutls-devel | 0:3.7.6-23.el9_3.3 |
| Red Hat Enterprise Linux 9 | gnutls-utils | 0:3.7.6-23.el9_3.3 |
| Red Hat Enterprise Linux 9 | gnutls-utils-debuginfo | 0:3.7.6-23.el9_3.3 |
| Red Hat rhel eus 9.2 | gnutls | 0:3.7.6-21.el9_2.2 |
| Red Hat rhel eus 9.2 | gnutls-c++ | 0:3.7.6-21.el9_2.2 |
| Red Hat rhel eus 9.2 | gnutls-c++-debuginfo | 0:3.7.6-21.el9_2.2 |
| Red Hat rhel eus 9.2 | gnutls-dane | 0:3.7.6-21.el9_2.2 |
| Red Hat rhel eus 9.2 | gnutls-dane-debuginfo | 0:3.7.6-21.el9_2.2 |
| Red Hat rhel eus 9.2 | gnutls-debuginfo | 0:3.7.6-21.el9_2.2 |
| Red Hat rhel eus 9.2 | gnutls-debugsource | 0:3.7.6-21.el9_2.2 |
| Red Hat rhel eus 9.2 | gnutls-devel | 0:3.7.6-21.el9_2.2 |
| Red Hat rhel eus 9.2 | gnutls-utils | 0:3.7.6-21.el9_2.2 |
| Red Hat rhel eus 9.2 | gnutls-utils-debuginfo | 0:3.7.6-21.el9_2.2 |
| SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS | gnutls | 3.7.3-150400.4.41.3 |
| SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS | gnutls | 3.7.3-150400.4.41.3 |
| SUSE Linux Enterprise Micro 5.3 | gnutls | 3.7.3-150400.1.3.1 |
| SUSE Linux Enterprise Micro 5.4 | gnutls | 3.7.3-150400.4.41.3 |
| SUSE Linux Enterprise Micro 5.5 | gnutls | 3.7.3-150400.4.41.3 |
| SUSE Linux Enterprise Module for Basesystem 15 SP5 | gnutls | 3.7.3-150400.4.41.3 |
| SUSE Linux Enterprise Server 15 SP4-LTSS | gnutls | 3.7.3-150400.4.41.3 |
| SUSE Linux Enterprise Server for SAP Applications 15 SP4 | gnutls | 3.7.3-150400.4.41.3 |
| SUSE Manager Proxy 4.3 | gnutls | 3.7.3-150400.4.41.3 |
| SUSE Manager Server 4.3 | gnutls | 3.7.3-150400.4.41.3 |
| Ubuntu 20.04 LTS | gnutls28 | 3.6.13-2ubuntu1.10 |
| Ubuntu 22.04 LTS | gnutls28 | 3.7.3-4ubuntu1.4 |
| Ubuntu 24.04 LTS | gnutls28 | 3.8.3-1ubuntu1 |
| openSUSE Leap 15.5 | gnutls | 3.7.3-150400.4.41.3 |
| openSUSE Leap Micro 5.4 | gnutls | 3.7.3-150400.4.41.3 |
| openSUSE Tumbleweed | gnutls | 3.8.3-1.1 |