Skip to content
OpenAdvisories

Package · Ubuntu

mod-gnutls

3 known vulnerabilities.

1 result · Clear filters · Feed

  • Medium 6.8

    mod_gnutls missing key purpose check in client certificate verification

    Mod_gnutls is a TLS module for Apache HTTPD based on GnuTLS. Prior to version 0.13.0, code for client certificate verification did not check the key purpose as set in the Extended Key Usage extension. An attacker with access to the private key for a valid cer…