CVE-2012-1573
CVE-2012-1573
This page contains facts from public vulnerability sources. Check the original advisory before updating.
This page shows selected source facts. See the linked advisories for the complete description and affected versions.
gnutls_cipher.c in libgnutls in GnuTLS before 2.12.17 and 3.x before 3.0.15 does not properly handle data encrypted with a block cipher, which allows remote attackers to cause a denial of service (heap memory corruption and application crash) via a crafted record, as demonstrated by a crafted GenericBlockCipher structure.
EPSS 4.2% · Fix available
- Published
- Updated
Stack: system
Affected products and versions
Original sources
- http://www.ubuntu.com/usn/USN-1418-1
- http://secunia.com/advisories/57260
- http://rhn.redhat.com/errata/RHSA-2012-0531.html
- http://article.gmane.org/gmane.comp.encryption.gpg.gnutls.devel/5912
- http://git.savannah.gnu.org/gitweb/?p=gnutls.git%3Ba=commit%3Bh=b495740f2ff66550ca9395b3fda3ea32c3acb185
- https://bugzilla.redhat.com/show_bug.cgi?id=805432
- http://secunia.com/advisories/48511
- http://osvdb.org/80259
- http://www.securityfocus.com/bid/52667
- http://www.openwall.com/lists/oss-security/2012/03/21/5
- http://secunia.com/advisories/48488
- http://secunia.com/advisories/48712
- http://www.gnu.org/software/gnutls/security.html
- http://www.securitytracker.com/id?1026828
- http://lists.fedoraproject.org/pipermail/package-announce/2012-April/077071.html
- http://lists.fedoraproject.org/pipermail/package-announce/2012-March/076496.html
- http://rhn.redhat.com/errata/RHSA-2012-0488.html
- http://lists.opensuse.org/opensuse-security-announce/2014-03/msg00001.html
- http://secunia.com/advisories/48596
- http://blog.mudynamics.com/2012/03/20/gnutls-and-libtasn1-vulns/
- http://git.savannah.gnu.org/gitweb/?p=gnutls.git%3Ba=commit%3Bh=422214868061370aeeb0ac9cd0f021a5c350a57d
- http://www.openwall.com/lists/oss-security/2012/03/21/4
- http://article.gmane.org/gmane.comp.encryption.gpg.gnutls.devel/5910
- https://nvd.nist.gov/vuln/detail/CVE-2012-1573