Skip to content
OpenAdvisories
High ELSA-2014-0684 2 CVEs

Important: gnutls security update (Oracle Linux 7)

Published Jul 23, 2014 · Updated Jul 23, 2014

Ecosystem: Oracle Linux

Summary

[3.1.18-9]
- fix session ID length check (#1102027)
- fixes null pointer dereference (#1101727)

Fixed packages 5

ReleasePackageFixed in
Oracle Linux · 7 gnutls 0:3.1.18-9.el7_0
Oracle Linux · 7 gnutls-c++ 0:3.1.18-9.el7_0
Oracle Linux · 7 gnutls-dane 0:3.1.18-9.el7_0
Oracle Linux · 7 gnutls-devel 0:3.1.18-9.el7_0
Oracle Linux · 7 gnutls-utils 0:3.1.18-9.el7_0

Vulnerabilities 2

  • Unscored —
    CVE-2014-3465

    The gnutls_x509_dn_oid_name function in lib/x509/common.c in GnuTLS 3.0 before 3.1.20 and 3.2.x before 3.2.10 allows re…

    gnutls28 Debian
  • Unscored —
    CVE-2014-3466 Public exploit EPSS 11%

    Buffer overflow in the read_server_hello function in lib/gnutls_handshake.c in GnuTLS before 3.1.25, 3.2.x before 3.2.1…

    gnutls28 gnutls28 gnutls26 Debian Ubuntu