CVE-2014-3466

Buffer overflow in the read_server_hello function in lib/gnutls_handshake.c in GnuTLS before 3.1.25, 3.2.x before 3.2.15, and 3.3.x before 3.3.4 allows remote servers to cause a denial of service (memory corruption) or possibly execute arbitrary code via a long session id in a ServerHello message.
ProviderTypeBase ScoreAtk. VectorAtk. ComplexityPriv. RequiredVector
NISTPrimary
6.8 UNKNOWN
NETWORK
MEDIUM
AV:N/AC:M/Au:N/C:P/I:P/A:P
Base Score
CVSS 3.x
EPSS Score
Percentile: 94%
Affected Products (NVD)
VendorProductVersion
gnugnutls
3.3.0
gnugnutls
3.3.0:pre0
gnugnutls
3.3.1
gnugnutls
3.3.2
gnugnutls
3.3.3
gnugnutls
𝑥
≤ 3.1.24
gnugnutls
3.1.0
gnugnutls
3.1.1
gnugnutls
3.1.2
gnugnutls
3.1.3
gnugnutls
3.1.4
gnugnutls
3.1.5
gnugnutls
3.1.6
gnugnutls
3.1.7
gnugnutls
3.1.8
gnugnutls
3.1.9
gnugnutls
3.1.10
gnugnutls
3.1.11
gnugnutls
3.1.12
gnugnutls
3.1.13
gnugnutls
3.1.14
gnugnutls
3.1.15
gnugnutls
3.1.16
gnugnutls
3.1.17
gnugnutls
3.1.18
gnugnutls
3.1.19
gnugnutls
3.1.20
gnugnutls
3.1.21
gnugnutls
3.1.22
gnugnutls
3.1.23
gnugnutls
3.2.0
gnugnutls
3.2.1
gnugnutls
3.2.2
gnugnutls
3.2.3
gnugnutls
3.2.4
gnugnutls
3.2.5
gnugnutls
3.2.6
gnugnutls
3.2.7
gnugnutls
3.2.8
gnugnutls
3.2.8.1
gnugnutls
3.2.9
gnugnutls
3.2.10
gnugnutls
3.2.11
gnugnutls
3.2.12
gnugnutls
3.2.12.1
gnugnutls
3.2.13
gnugnutls
3.2.14
𝑥
= Vulnerable software versions
Debian logo
Debian Releases
Debian Product
Codename
gnutls28
bookworm
3.7.9-2+deb12u3
fixed
bullseye
3.7.1-5+deb11u5
fixed
bullseye (security)
3.7.1-5+deb11u6
fixed
sid
3.8.6-2
fixed
trixie
3.8.6-2
fixed
Ubuntu logo
Ubuntu Releases
Ubuntu Product
Codename
gnutls26
lucid
Fixed 2.8.5-2ubuntu0.6
released
precise
Fixed 2.12.14-5ubuntu3.8
released
saucy
Fixed 2.12.23-1ubuntu4.3
released
trusty
Fixed 2.12.23-12ubuntu2.1
released
utopic
Fixed 2.12.23-15ubuntu2
released
vivid
dne
gnutls28
lucid
dne
precise
Fixed 3.0.11-1ubuntu2.1
released
saucy
ignored
trusty
Fixed 3.2.11-2ubuntu1.1
released
utopic
not-affected
vivid
not-affected
openSUSE logo
openSUSE / SLES Releases
openSUSE Product
Release
gnutls
suse enterprise desktop 15
3.6.2-4.15
fixed
suse enterprise sap 12 SP5
3.3.27-3.3.1
fixed
suse enterprise sap 15
3.6.2-4.15
fixed
suse enterprise server 12 SP1
3.2.15-11.1
fixed
suse enterprise server 12 SP2
3.2.15-11.1
fixed
suse enterprise server 12 SP4
3.3.27-3.3.1
fixed
suse enterprise server 12 SP5
3.3.27-3.3.1
fixed
suse enterprise server 15
3.6.2-4.15
fixed
libgnutls-devel
suse enterprise desktop 15
3.6.2-4.15
fixed
suse enterprise sap 15
3.6.2-4.15
fixed
suse enterprise server 15
3.6.2-4.15
fixed
libgnutls-openssl27
suse enterprise sap 12 SP5
3.3.27-3.3.1
fixed
suse enterprise server 12 SP1
3.2.15-11.1
fixed
suse enterprise server 12 SP2
3.2.15-11.1
fixed
suse enterprise server 12 SP4
3.3.27-3.3.1
fixed
suse enterprise server 12 SP5
3.3.27-3.3.1
fixed
libgnutls28
suse enterprise sap 12 SP5
3.3.27-3.3.1
fixed
suse enterprise server 12 SP1
3.2.15-11.1
fixed
suse enterprise server 12 SP2
3.2.15-11.1
fixed
suse enterprise server 12 SP4
3.3.27-3.3.1
fixed
suse enterprise server 12 SP5
3.3.27-3.3.1
fixed
libgnutls28-32bit
suse enterprise sap 12 SP5
3.3.27-3.3.1
fixed
suse enterprise server 12 SP1
3.2.15-11.1
fixed
suse enterprise server 12 SP2
3.2.15-11.1
fixed
suse enterprise server 12 SP4
3.3.27-3.3.1
fixed
suse enterprise server 12 SP5
3.3.27-3.3.1
fixed
libgnutls30
suse enterprise desktop 15
3.6.2-4.15
fixed
suse enterprise sap 15
3.6.2-4.15
fixed
suse enterprise server 15
3.6.2-4.15
fixed
libgnutlsxx-devel
suse enterprise desktop 15
3.6.2-4.15
fixed
suse enterprise sap 15
3.6.2-4.15
fixed
suse enterprise server 15
3.6.2-4.15
fixed
libgnutlsxx28
suse enterprise desktop 15
3.6.2-4.15
fixed
suse enterprise sap 15
3.6.2-4.15
fixed
suse enterprise server 15
3.6.2-4.15
fixed
Red Hat logo
Red Hat Enterprise Linux Releases
Red Hat Product
Release
gnutls
RHEL 6
0:2.8.5-14.el6_5
fixed
RHEL 7
0:3.1.18-9.el7_0
fixed
gnutls-c
RHEL 7
0:3.1.18-9.el7_0
fixed
gnutls-dane
RHEL 7
0:3.1.18-9.el7_0
fixed
gnutls-devel
RHEL 6
0:2.8.5-14.el6_5
fixed
RHEL 7
0:3.1.18-9.el7_0
fixed
gnutls-guile
RHEL 6
0:2.8.5-14.el6_5
fixed
gnutls-utils
RHEL 6
0:2.8.5-14.el6_5
fixed
RHEL 7
0:3.1.18-9.el7_0
fixed
Common Weakness Enumeration
References
http://linux.oracle.com/errata/ELSA-2014-0594.html
http://linux.oracle.com/errata/ELSA-2014-0595.html
http://lists.opensuse.org/opensuse-security-announce/2014-06/msg00002.html
http://lists.opensuse.org/opensuse-security-announce/2014-06/msg00007.html
http://lists.opensuse.org/opensuse-security-announce/2014-06/msg00010.html
http://lists.opensuse.org/opensuse-security-announce/2014-06/msg00015.html
http://radare.today/technical-analysis-of-the-gnutls-hello-vulnerability/
http://rhn.redhat.com/errata/RHSA-2014-0594.html
http://rhn.redhat.com/errata/RHSA-2014-0595.html
http://rhn.redhat.com/errata/RHSA-2014-0684.html
http://rhn.redhat.com/errata/RHSA-2014-0815.html
http://secunia.com/advisories/58340
http://secunia.com/advisories/58598
http://secunia.com/advisories/58601
http://secunia.com/advisories/58642
http://secunia.com/advisories/59016
http://secunia.com/advisories/59021
http://secunia.com/advisories/59057
http://secunia.com/advisories/59086
http://secunia.com/advisories/59408
http://secunia.com/advisories/59838
http://secunia.com/advisories/60384
http://www-01.ibm.com/support/docview.wss?uid=swg21678776
http://www-947.ibm.com/support/entry/portal/docdisplay?lndocid=MIGR-5096155
http://www.debian.org/security/2014/dsa-2944
http://www.gnutls.org/security.html
http://www.novell.com/support/kb/doc.php?id=7015302
http://www.novell.com/support/kb/doc.php?id=7015303
http://www.securityfocus.com/bid/67741
http://www.securitytracker.com/id/1030314
http://www.ubuntu.com/usn/USN-2229-1
https://bugzilla.redhat.com/show_bug.cgi?id=1101932
https://www.gitorious.org/gnutls/gnutls/commit/688ea6428a432c39203d00acd1af0e7684e5ddfd
http://linux.oracle.com/errata/ELSA-2014-0594.html
http://linux.oracle.com/errata/ELSA-2014-0595.html
http://lists.opensuse.org/opensuse-security-announce/2014-06/msg00002.html
http://lists.opensuse.org/opensuse-security-announce/2014-06/msg00007.html
http://lists.opensuse.org/opensuse-security-announce/2014-06/msg00010.html
http://lists.opensuse.org/opensuse-security-announce/2014-06/msg00015.html
http://radare.today/technical-analysis-of-the-gnutls-hello-vulnerability/
http://rhn.redhat.com/errata/RHSA-2014-0594.html
http://rhn.redhat.com/errata/RHSA-2014-0595.html
http://rhn.redhat.com/errata/RHSA-2014-0684.html
http://rhn.redhat.com/errata/RHSA-2014-0815.html
http://secunia.com/advisories/58340
http://secunia.com/advisories/58598
http://secunia.com/advisories/58601
http://secunia.com/advisories/58642
http://secunia.com/advisories/59016
http://secunia.com/advisories/59021
http://secunia.com/advisories/59057
http://secunia.com/advisories/59086
http://secunia.com/advisories/59408
http://secunia.com/advisories/59838
http://secunia.com/advisories/60384
http://www-01.ibm.com/support/docview.wss?uid=swg21678776
http://www-947.ibm.com/support/entry/portal/docdisplay?lndocid=MIGR-5096155
http://www.debian.org/security/2014/dsa-2944
http://www.gnutls.org/security.html
http://www.novell.com/support/kb/doc.php?id=7015302
http://www.novell.com/support/kb/doc.php?id=7015303
http://www.securityfocus.com/bid/67741
http://www.securitytracker.com/id/1030314
http://www.ubuntu.com/usn/USN-2229-1
https://bugzilla.redhat.com/show_bug.cgi?id=1101932
https://www.gitorious.org/gnutls/gnutls/commit/688ea6428a432c39203d00acd1af0e7684e5ddfd