Description
gnutls_cipher.c in libgnutls in GnuTLS before 2.12.17 and 3.x before 3.0.15 does not properly handle data encrypted with a block cipher, which allows remote attackers to cause a denial of service (heap memory corruption and application crash) via a crafted record, as demonstrated by a crafted GenericBlockCipher structure.
Fixed in Linux distributions
Distributions backport fixes, so the version that fixes this vulnerability differs per release — upgrade to at least the version shown. From the distributions' security trackers and advisories.
Debian
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Debian 14 | gnutls28 | 3.0.17-2 | — |
| Debian 13 | gnutls28 | 3.0.17-2 | — |
| Debian 12 | gnutls28 | 3.0.17-2 | — |
| Debian 6.0 | gnutls26 | 2.8.6-1+squeeze2 | DSA-2441-1 |
Red Hat
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| RHEL 6 | gnutls +3 | 2.8.5-4.el6_2.2 | RHSA-2012:0429 |
| RHEL 6 | rhev-hypervisor6 +1 | 6.2-20120423.1.el6_2 | RHSA-2012:0531 |
| RHEL 5 | gnutls +2 | 1.4.1-7.el5_8.2 | RHSA-2012:0428 |
openSUSE
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| openSUSE Tumbleweed | gnutls | 3.4.15-1.1 | openSUSE-SU-2024:10105-1 |
Advisories 5
- RHSA-2012:0531 Red Hat Security Advisory: rhev-hypervisor6 security and bug fix update Red Hat Security Advisories (RHSA) · Jun 28, 2026
- RHSA-2012:0429 Red Hat Security Advisory: gnutls security update Red Hat Security Advisories (RHSA) · Jun 28, 2026
- RHSA-2012:0428 Red Hat Security Advisory: gnutls security update Red Hat Security Advisories (RHSA) · Jun 28, 2026
- DSA-2441-1 gnutls26 - missing bounds check Debian Security (DSA / DLA) · Mar 9, 2026
- openSUSE-SU-2024:10105-1 gnutls-3.4.15-1.1 on GA media SUSE / openSUSE Security Updates · May 7, 2025
References
- USN-1418-1 vendor-advisory
- 57260 third-party-advisory
- RHSA-2012:0531 vendor-advisory
- [gnutls-devel] 20120302 gnutls 3.0.15 mailing-list
- http://git.savannah.gnu.org/gitweb/?p=gnutls.git%3Ba=commit%3Bh=b495740f2ff66550ca9395b3fda3ea32c3acb185
- https://bugzilla.redhat.com/show_bug.cgi?id=805432
- 48511 third-party-advisory
- 80259 vdb-entry
- 52667 vdb-entry
- [oss-security] 20120321 Re: CVE request: GnuTLS TLS record handling issue / MU-201202-01 mailing-list
- 48488 third-party-advisory
- 48712 third-party-advisory
- http://www.gnu.org/software/gnutls/security.html
- 1026828 vdb-entry
- FEDORA-2012-4569 vendor-advisory
- FEDORA-2012-4578 vendor-advisory
- RHSA-2012:0488 vendor-advisory
- SUSE-SU-2014:0320 vendor-advisory
- 48596 third-party-advisory
- http://blog.mudynamics.com/2012/03/20/gnutls-and-libtasn1-vulns/
- http://git.savannah.gnu.org/gitweb/?p=gnutls.git%3Ba=commit%3Bh=422214868061370aeeb0ac9cd0f021a5c350a57d
- [oss-security] 20120321 CVE request: GnuTLS TLS record handling issue / MU-201202-01 mailing-list
- [gnutls-devel] 20120302 gnutls 2.12.16 mailing-list
- DSA-2441 vendor-advisory
- MDVSA-2012:040 vendor-advisory
- RHSA-2012:0429 vendor-advisory
- 20120320 Mu Dynamics, Inc. Security Advisories MU-201202-01 and MU-201202-02 for GnuTLS and Libtasn1 mailing-list