Fluid Attacks Database

Description

GnuTLS before 3.3.13 does not validate that the signature algorithms match when importing a certificate.

Mitigation

Update Impact

Minimal update. May introduce new vulnerabilities or breaking changes.

Ecosystem	Component	Affected version	Patched versions
debian 11	gnutls28	>=0 <3.3.8-6	3.3.8-6
debian 13	gnutls28	>=0 <3.3.8-6	3.3.8-6
debian 14	gnutls28	>=0 <3.3.8-6	3.3.8-6
debian 12	gnutls28	>=0 <3.3.8-6	3.3.8-6
rpm rhel7	gnutls	-	-
rpm rhel5	gnutls	-	-
rpm rhel6	gnutls	<0:2.8.5-18.el6	0:2.8.5-18.el6

Aliases

Does your application use this vulnerable software?

During the free trial, our tools assess your application, identify vulnerabilities, and provide recommendations for their remediation.