CVE-2015-0294

GnuTLS before 3.3.13 does not validate that the signature algorithms match when importing a certificate.
ProviderTypeBase ScoreAtk. VectorAtk. ComplexityPriv. RequiredVector
NISTNIST
7.5 HIGH
NETWORK
LOW
NONE
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N
redhatCNA
---
---
CVEADP
---
---
Base Score
CVSS 3.x
EPSS Score
Percentile: 61%
VendorProductVersion
gnugnutls
𝑥
< 3.3.13
debiandebian_linux
7.0
redhatenterprise_linux
5.0
redhatenterprise_linux
7.0
𝑥
= Vulnerable software versions
Debian logo
Debian Releases
Debian Product
Codename
gnutls28
bullseye
3.7.1-5+deb11u5
fixed
bullseye (security)
3.7.1-5+deb11u6
fixed
bookworm
3.7.9-2+deb12u3
fixed
sid
3.8.6-2
fixed
trixie
3.8.6-2
fixed
Ubuntu logo
Ubuntu Releases
Ubuntu Product
Codename
gnutls26
disco
dne
cosmic
dne
bionic
dne
artful
dne
zesty
dne
yakkety
dne
xenial
dne
wily
dne
vivid
dne
utopic
ignored
trusty
Fixed 2.12.23-12ubuntu2.2
released
precise
Fixed 2.12.14-5ubuntu3.9
released
lucid
Fixed 2.8.5-2ubuntu0.7
released
gnutls28
disco
Fixed 3.3.8-3ubuntu3
released
cosmic
Fixed 3.3.8-3ubuntu3
released
bionic
Fixed 3.3.8-3ubuntu3
released
artful
Fixed 3.3.8-3ubuntu3
released
zesty
Fixed 3.3.8-3ubuntu3
released
yakkety
Fixed 3.3.8-3ubuntu3
released
xenial
Fixed 3.3.8-3ubuntu3
released
wily
Fixed 3.3.8-3ubuntu3
released
vivid
Fixed 3.3.8-3ubuntu3
released
utopic
Fixed 3.2.16-1ubuntu2.2
released
trusty
dne
precise
ignored
lucid
dne