CVE-2015-6251
NoneCVSS
—
EPSS
19.0%
Published
Aug 24, 2015
CISA due date
—
The record
Double free vulnerability in GnuTLS before 3.3.17 and 3.4.x before 3.4.4 allows remote attackers to cause a denial of service via a long DistinguishedName (DN) entry in a certificate.
Affected packages
| Ecosystem | Package | Introduced | Fixed |
|---|---|---|---|
| Debian:11 | gnutls28 | 0 | 3.3.17-1 |
| Debian:12 | gnutls28 | 0 | 3.3.17-1 |
| Debian:13 | gnutls28 | 0 | 3.3.17-1 |
| Debian:14 | gnutls28 | 0 | 3.3.17-1 |
| Debian:8 | gnutls28 | 0 | 3.3.8-6+deb8u2 |
| Mageia:4 | gnutls | 0 | 3.2.7-1.7.mga4 |
| Mageia:5 | gnutls | 0 | 3.2.21-1.1.mga5 |
| SUSE:Linux Enterprise Desktop 12 | gnutls | 0 | 3.2.15-11.1 |
| SUSE:Linux Enterprise Server 12 | gnutls | 0 | 3.2.15-11.1 |
| SUSE:Linux Enterprise Server for SAP Applications 12 | gnutls | 0 | 3.2.15-11.1 |
| SUSE:Linux Enterprise Software Development Kit 12 | gnutls | 0 | 3.2.15-11.1 |
| Ubuntu:16.04:LTS | gnutls28 | 0 | 3.3.15-5ubuntu2 |
| openSUSE:Tumbleweed | gnutls | 0 | 3.4.15-1.1 |
Related vulnerabilities
- CVE-2024-28834 A flaw was found in GnuTLS. Also affects gnutls28
- CVE-2024-28835 A flaw has been discovered in GnuTLS where an application crash can be induced when… Also affects gnutls28
- CVE-2024-0553 A vulnerability was found in GnuTLS. Also affects gnutls28
- CVE-2023-5981 A vulnerability was found that the response times to malformed ciphertexts in RSA-PSK… Also affects gnutls28
- CVE-2017-7507 GnuTLS version 3.5.12 and earlier is vulnerable to a NULL pointer dereference while… Also affects gnutls28
- CVE-2017-5334 Double free vulnerability in the gnutls_x509_ext_import_proxy function in GnuTLS before… Also affects gnutls28
- CVE-2016-7444 The gnutls_ocsp_resp_check_crt function in lib/x509/ocsp.c in GnuTLS before 3.4.15 and… Also affects gnutls28
- CVE-2015-7575 Mozilla Network Security Services (NSS) before 3.20.2, as used in Mozilla Firefox before… Also affects gnutls28