Fluid Attacks Database

Description

The gnutls_x509_dn_oid_name function in lib/x509/common.c in GnuTLS 3.0 before 3.1.20 and 3.2.x before 3.2.10 allows remote attackers to cause a denial of service (NULL pointer dereference) via a crafted X.509 certificate, related to a missing LDAP description for an OID when printing the DN.

Mitigation

Update Impact

Minimal update. May introduce new vulnerabilities or breaking changes.

Ecosystem	Component	Affected version	Patched versions
debian 12	gnutls28	>=0 <3.2.10-1	3.2.10-1
debian 11	gnutls28	>=0 <3.2.10-1	3.2.10-1
debian 13	gnutls28	>=0 <3.2.10-1	3.2.10-1
debian 14	gnutls28	>=0 <3.2.10-1	3.2.10-1
rpm rhel7	gnutls	<0:3.1.18-9.el7_0	0:3.1.18-9.el7_0

Aliases

1. CVE-2014-34652. NVD-2014-34653. OSV-DEBIAN-2014-34654. OSV-2014-34655. SECURITY-TRACKER-CVE-2014-3465

Does your application use this vulnerable software?

During the free trial, our tools assess your application, identify vulnerabilities, and provide recommendations for their remediation.