CVE-2024-0567
CVE-2024-0567 · Gnutls: rejects certificate chain with distributed trust
This page contains facts from public vulnerability sources. Check the original advisory before updating.
This page shows selected source facts. See the linked advisories for the complete description and affected versions.
A vulnerability was found in GnuTLS, where a cockpit (which uses gnuTLS) rejects a certificate chain with distributed trust. This issue occurs when validating a certificate chain with cockpit-certificate-ensure. This flaw allows an unauthenticated, remote client or attacker to initiate a denial of service attack.
CVSS 7.5 · High · EPSS 1.4% · Fix available
- Published
- Updated
Stack: system
Affected products and versions
red hat enterprise linux 9
- Versions
- ≥ 0:3.7.6-23.el9_3.3: Not affected (rpm)
No fix published
red hat enterprise linux 9.2 extended update support
- Versions
- ≥ 0:3.7.6-21.el9_2.2: Not affected (rpm)
No fix published
rhodf-4.15-rhel-9
- Versions
- ≥ v4.15.0-37: Not affected (rpm)
No fix published
rhodf-4.15-rhel-9
- Versions
- ≥ v4.15.0-68: Not affected (rpm)
No fix published
rhodf-4.15-rhel-9
- Versions
- ≥ v4.15.0-158: Not affected (rpm)
No fix published
rhodf-4.15-rhel-9
- Versions
- ≥ v4.15.0-39: Not affected (rpm)
No fix published
rhodf-4.15-rhel-9
- Versions
- ≥ v4.15.0-58: Not affected (rpm)
No fix published
rhodf-4.15-rhel-9
- Versions
- ≥ v4.15.0-13: Not affected (rpm)
No fix published
rhodf-4.15-rhel-9
- Versions
- ≥ v4.15.0-81: Not affected (rpm)
No fix published
rhodf-4.15-rhel-9
- Versions
- ≥ v4.15.0-79: Not affected (rpm)
No fix published
rhodf-4.15-rhel-9
- Versions
- ≥ v4.15.0-22: Not affected (rpm)
No fix published
rhodf-4.15-rhel-9
- Versions
- ≥ v4.15.0-57: Not affected (rpm)
No fix published
rhodf-4.15-rhel-9
- Versions
- ≥ v4.15.0-6: Not affected (rpm)
No fix published
rhodf-4.15-rhel-9
- Versions
- ≥ v4.15.0-15: Not affected (rpm)
No fix published
rhodf-4.15-rhel-9
- Versions
- ≥ v4.15.0-54: Not affected (rpm)
No fix published
rhodf-4.15-rhel-9
- Versions
- ≥ v4.15.0-10: Not affected (rpm)
No fix published
rhodf-4.15-rhel-9
- Versions
- ≥ v4.15.0-26: Not affected (rpm)
No fix published
rhodf-4.15-rhel-9
- Versions
- ≥ v4.15.0-19: Not affected (rpm)
No fix published
rhodf-4.15-rhel-9
- Versions
- ≥ v4.15.0-21: Not affected (rpm)
No fix published
rhodf-4.15-rhel-9
- Versions
- ≥ v4.15.0-103: Not affected (rpm)
No fix published
rhol-5.8-rhel-9
- Versions
- ≥ v5.8.6-22: Not affected (rpm)
No fix published
rhol-5.8-rhel-9
- Versions
- ≥ v5.8.6-11: Not affected (rpm)
No fix published
rhol-5.8-rhel-9
- Versions
- ≥ v6.8.1-407: Not affected (rpm)
No fix published
rhol-5.8-rhel-9
- Versions
- ≥ v5.8.6-19: Not affected (rpm)
No fix published
Original sources
- https://access.redhat.com/errata/RHSA-2024:0533
- https://access.redhat.com/errata/RHSA-2024:1082
- https://access.redhat.com/errata/RHSA-2024:1383
- https://access.redhat.com/errata/RHSA-2024:2094
- https://access.redhat.com/security/cve/CVE-2024-0567
- https://bugzilla.redhat.com/show_bug.cgi?id=2258544
- https://gitlab.com/gnutls/gnutls/-/issues/1521
- https://lists.gnupg.org/pipermail/gnutls-help/2024-January/004841.html
- http://www.openwall.com/lists/oss-security/2024/01/19/3
- https://lists.fedoraproject.org/archives/list/[email protected]/message/7ZEIOLORQ7N6WRPFXZSYDL2MC4LP7VFV/
- https://lists.fedoraproject.org/archives/list/[email protected]/message/GNXKVR5YNUEBNHAHM5GSYKBZX4W2HMN2/
- https://security.netapp.com/advisory/ntap-20240202-0011/
- https://cert-portal.siemens.com/productcert/html/ssa-794697.html
- https://nvd.nist.gov/vuln/detail/CVE-2024-0567