7 results · Clear filters · Feed
-
Medium 4.8
GnuTLS v3.8.13 does not reject a critical keyUsage extension when it cannot be processed, such as when extnValue is an …
-
Medium 5.9
GnuTLS v3.8.13 does not properly enforce name constraints, as demonstrated by a permitted subtree violation for "EE O=E…
-
Medium 6.5
GnuTLS v3.8.13 can perhaps unexpectedly trust a certificate on the basis of Common Name when Subject Alternative Name h…
-
Medium 4.7
A Bleichenbacher type side-channel based padding oracle attack was found in the way gnutls handles verification of RSA …
-
Medium 5.3
A cache-based side channel in GnuTLS implementation that leads to plain text recovery in cross-VM attack setting was fo…
-
Medium 5.9
It was found that the GnuTLS implementation of HMAC-SHA-384 was vulnerable to a Lucky thirteen style attack. Remote att…
-
Medium 5.9
It was found that the GnuTLS implementation of HMAC-SHA-256 was vulnerable to a Lucky thirteen style attack. Remote att…