CVE-2014-0092
NoneCVSS
—
EPSS
29.9%
Published
Mar 7, 2014
CISA due date
—
The record
lib/x509/verify.c in GnuTLS before 3.1.22 and 3.2.x before 3.2.12 does not properly handle unspecified errors when verifying X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers via a crafted certificate.
Affected packages
| Ecosystem | Package | Introduced | Fixed |
|---|---|---|---|
| Debian:11 | gnutls28 | 0 | 3.2.11-2 |
| Debian:12 | gnutls28 | 0 | 3.2.11-2 |
| Debian:13 | gnutls28 | 0 | 3.2.11-2 |
| Debian:6.0 | gnutls26 | 0 | 2.8.6-1+squeeze3 |
| Debian:7 | gnutls26 | 0 | 2.12.20-8+deb7u1 |
| Mageia:3 | gnutls | 0 | 3.1.16-1.2.mga3 |
| Mageia:4 | gnutls | 0 | 3.2.7-1.2.mga4 |
| Red Hat:enterprise_linux:5::client | gnutls | 0 | 0:1.4.1-14.el5_10 |
| Red Hat:enterprise_linux:5::client | gnutls-debuginfo | 0 | 0:1.4.1-14.el5_10 |
| Red Hat:enterprise_linux:5::client | gnutls-devel | 0 | 0:1.4.1-14.el5_10 |
| Red Hat:enterprise_linux:5::client | gnutls-utils | 0 | 0:1.4.1-14.el5_10 |
| Red Hat:enterprise_linux:5::client_workstation | gnutls | 0 | 0:1.4.1-14.el5_10 |
| Red Hat:enterprise_linux:5::client_workstation | gnutls-debuginfo | 0 | 0:1.4.1-14.el5_10 |
| Red Hat:enterprise_linux:5::client_workstation | gnutls-devel | 0 | 0:1.4.1-14.el5_10 |
| Red Hat:enterprise_linux:5::client_workstation | gnutls-utils | 0 | 0:1.4.1-14.el5_10 |
| Red Hat:enterprise_linux:5::server | gnutls | 0 | 0:1.4.1-14.el5_10 |
| Red Hat:enterprise_linux:5::server | gnutls-debuginfo | 0 | 0:1.4.1-14.el5_10 |
| Red Hat:enterprise_linux:5::server | gnutls-devel | 0 | 0:1.4.1-14.el5_10 |
| Red Hat:enterprise_linux:5::server | gnutls-utils | 0 | 0:1.4.1-14.el5_10 |
| Red Hat:enterprise_linux:6::client | gnutls | 0 | 0:2.8.5-13.el6_5 |
| Red Hat:enterprise_linux:6::client | gnutls-debuginfo | 0 | 0:2.8.5-13.el6_5 |
| Red Hat:enterprise_linux:6::client | gnutls-devel | 0 | 0:2.8.5-13.el6_5 |
| Red Hat:enterprise_linux:6::client | gnutls-guile | 0 | 0:2.8.5-13.el6_5 |
| Red Hat:enterprise_linux:6::client | gnutls-utils | 0 | 0:2.8.5-13.el6_5 |
| Red Hat:enterprise_linux:6::computenode | gnutls | 0 | 0:2.8.5-13.el6_5 |
| Red Hat:enterprise_linux:6::computenode | gnutls-debuginfo | 0 | 0:2.8.5-13.el6_5 |
| Red Hat:enterprise_linux:6::computenode | gnutls-devel | 0 | 0:2.8.5-13.el6_5 |
| Red Hat:enterprise_linux:6::computenode | gnutls-guile | 0 | 0:2.8.5-13.el6_5 |
| Red Hat:enterprise_linux:6::computenode | gnutls-utils | 0 | 0:2.8.5-13.el6_5 |
| Red Hat:enterprise_linux:6::hypervisor | rhev-hypervisor6 | 0 | 0:6.5-20140324.0.el6ev |
| Red Hat:enterprise_linux:6::server | gnutls | 0 | 0:2.8.5-13.el6_5 |
| Red Hat:enterprise_linux:6::server | gnutls-debuginfo | 0 | 0:2.8.5-13.el6_5 |
| Red Hat:enterprise_linux:6::server | gnutls-devel | 0 | 0:2.8.5-13.el6_5 |
| Red Hat:enterprise_linux:6::server | gnutls-guile | 0 | 0:2.8.5-13.el6_5 |
| Red Hat:enterprise_linux:6::server | gnutls-utils | 0 | 0:2.8.5-13.el6_5 |
| Red Hat:enterprise_linux:6::workstation | gnutls | 0 | 0:2.8.5-13.el6_5 |
| Red Hat:enterprise_linux:6::workstation | gnutls-debuginfo | 0 | 0:2.8.5-13.el6_5 |
| Red Hat:enterprise_linux:6::workstation | gnutls-devel | 0 | 0:2.8.5-13.el6_5 |
| Red Hat:enterprise_linux:6::workstation | gnutls-guile | 0 | 0:2.8.5-13.el6_5 |
| Red Hat:enterprise_linux:6::workstation | gnutls-utils | 0 | 0:2.8.5-13.el6_5 |
| Red Hat:rhel_els:4::as | gnutls | 0 | 0:1.0.20-5.el4 |
| Red Hat:rhel_els:4::as | gnutls-debuginfo | 0 | 0:1.0.20-5.el4 |
| Red Hat:rhel_els:4::as | gnutls-devel | 0 | 0:1.0.20-5.el4 |
| Red Hat:rhel_els:4::es | gnutls | 0 | 0:1.0.20-5.el4 |
| Red Hat:rhel_els:4::es | gnutls-debuginfo | 0 | 0:1.0.20-5.el4 |
| Red Hat:rhel_els:4::es | gnutls-devel | 0 | 0:1.0.20-5.el4 |
| Red Hat:rhel_eus:5.9 | gnutls | 0 | 0:1.4.1-10.el5_9.3 |
| Red Hat:rhel_eus:5.9 | gnutls-debuginfo | 0 | 0:1.4.1-10.el5_9.3 |
| Red Hat:rhel_eus:5.9 | gnutls-devel | 0 | 0:1.4.1-10.el5_9.3 |
| Red Hat:rhel_eus:5.9 | gnutls-utils | 0 | 0:1.4.1-10.el5_9.3 |
| Red Hat:rhel_eus:6.3::computenode | gnutls | 0 | 0:2.8.5-7.el6_3.2 |
| Red Hat:rhel_eus:6.3::computenode | gnutls-debuginfo | 0 | 0:2.8.5-7.el6_3.2 |
| Red Hat:rhel_eus:6.3::computenode | gnutls-devel | 0 | 0:2.8.5-7.el6_3.2 |
| Red Hat:rhel_eus:6.3::computenode | gnutls-guile | 0 | 0:2.8.5-7.el6_3.2 |
| Red Hat:rhel_eus:6.3::computenode | gnutls-utils | 0 | 0:2.8.5-7.el6_3.2 |
| Red Hat:rhel_eus:6.3::server | gnutls | 0 | 0:2.8.5-7.el6_3.2 |
| Red Hat:rhel_eus:6.3::server | gnutls-debuginfo | 0 | 0:2.8.5-7.el6_3.2 |
| Red Hat:rhel_eus:6.3::server | gnutls-devel | 0 | 0:2.8.5-7.el6_3.2 |
| Red Hat:rhel_eus:6.3::server | gnutls-guile | 0 | 0:2.8.5-7.el6_3.2 |
| Red Hat:rhel_eus:6.3::server | gnutls-utils | 0 | 0:2.8.5-7.el6_3.2 |
| Red Hat:rhel_eus:6.4::computenode | gnutls | 0 | 0:2.8.5-10.el6_4.3 |
| Red Hat:rhel_eus:6.4::computenode | gnutls-debuginfo | 0 | 0:2.8.5-10.el6_4.3 |
| Red Hat:rhel_eus:6.4::computenode | gnutls-devel | 0 | 0:2.8.5-10.el6_4.3 |
| Red Hat:rhel_eus:6.4::computenode | gnutls-guile | 0 | 0:2.8.5-10.el6_4.3 |
| Red Hat:rhel_eus:6.4::computenode | gnutls-utils | 0 | 0:2.8.5-10.el6_4.3 |
| Red Hat:rhel_eus:6.4::server | gnutls | 0 | 0:2.8.5-10.el6_4.3 |
| Red Hat:rhel_eus:6.4::server | gnutls-debuginfo | 0 | 0:2.8.5-10.el6_4.3 |
| Red Hat:rhel_eus:6.4::server | gnutls-devel | 0 | 0:2.8.5-10.el6_4.3 |
| Red Hat:rhel_eus:6.4::server | gnutls-guile | 0 | 0:2.8.5-10.el6_4.3 |
| Red Hat:rhel_eus:6.4::server | gnutls-utils | 0 | 0:2.8.5-10.el6_4.3 |
| Red Hat:rhel_mission_critical:5.3 | gnutls | 0 | 0:1.4.1-3.el5_3.6 |
| Red Hat:rhel_mission_critical:5.3 | gnutls-debuginfo | 0 | 0:1.4.1-3.el5_3.6 |
| Red Hat:rhel_mission_critical:5.3 | gnutls-devel | 0 | 0:1.4.1-3.el5_3.6 |
| Red Hat:rhel_mission_critical:5.3 | gnutls-utils | 0 | 0:1.4.1-3.el5_3.6 |
| Red Hat:rhel_mission_critical:5.6 | gnutls | 0 | 0:1.4.1-7.el5_6.1 |
| Red Hat:rhel_mission_critical:5.6 | gnutls-debuginfo | 0 | 0:1.4.1-7.el5_6.1 |
| Red Hat:rhel_mission_critical:5.6 | gnutls-devel | 0 | 0:1.4.1-7.el5_6.1 |
| Red Hat:rhel_mission_critical:5.6 | gnutls-utils | 0 | 0:1.4.1-7.el5_6.1 |
| Red Hat:rhel_mission_critical:6.2::server | gnutls | 0 | 0:2.8.5-4.el6_2.3 |
| Red Hat:rhel_mission_critical:6.2::server | gnutls-debuginfo | 0 | 0:2.8.5-4.el6_2.3 |
| Red Hat:rhel_mission_critical:6.2::server | gnutls-devel | 0 | 0:2.8.5-4.el6_2.3 |
| Red Hat:rhel_mission_critical:6.2::server | gnutls-guile | 0 | 0:2.8.5-4.el6_2.3 |
| Red Hat:rhel_mission_critical:6.2::server | gnutls-utils | 0 | 0:2.8.5-4.el6_2.3 |
| Ubuntu:14.04:LTS | gnutls26 | 0 | 2.12.23-12ubuntu2 |
| Ubuntu:14.04:LTS | gnutls28 | 0 | 3.2.11-2ubuntu1 |
| openSUSE:Tumbleweed | gnutls | 0 | 3.4.15-1.1 |
Related vulnerabilities
- CVE-2024-28834 A flaw was found in GnuTLS. Also affects gnutls28
- CVE-2024-28835 A flaw has been discovered in GnuTLS where an application crash can be induced when… Also affects gnutls28
- CVE-2024-0553 A vulnerability was found in GnuTLS. Also affects gnutls28
- CVE-2023-5981 A vulnerability was found that the response times to malformed ciphertexts in RSA-PSK… Also affects gnutls28
- CVE-2017-7507 GnuTLS version 3.5.12 and earlier is vulnerable to a NULL pointer dereference while… Also affects gnutls28
- CVE-2017-5334 Double free vulnerability in the gnutls_x509_ext_import_proxy function in GnuTLS before… Also affects gnutls28
- CVE-2016-7444 The gnutls_ocsp_resp_check_crt function in lib/x509/ocsp.c in GnuTLS before 3.4.15 and… Also affects gnutls28
- CVE-2015-7575 Mozilla Network Security Services (NSS) before 3.20.2, as used in Mozilla Firefox before… Also affects gnutls28