CVE-2015-6251

EUVD-2015-6193
Double free vulnerability in GnuTLS before 3.3.17 and 3.4.x before 3.4.4 allows remote attackers to cause a denial of service via a long DistinguishedName (DN) entry in a certificate.
ProviderTypeBase ScoreAtk. VectorAtk. ComplexityPriv. RequiredVector
NISTPrimary
5 UNKNOWN
NETWORK
LOW
AV:N/AC:L/Au:N/C:N/I:N/A:P
Base Score
CVSS 3.x
EPSS Score
Percentile: 91%
Affected Products (NVD)
VendorProductVersion
gnugnutls
3.3.0
gnugnutls
3.3.0:pre0
gnugnutls
3.3.1
gnugnutls
3.3.2
gnugnutls
3.3.3
gnugnutls
3.3.4
gnugnutls
3.3.5
gnugnutls
3.3.6
gnugnutls
3.3.7
gnugnutls
3.3.8
gnugnutls
3.3.9
gnugnutls
3.3.10
gnugnutls
3.3.11
gnugnutls
3.3.12
gnugnutls
3.3.13
gnugnutls
3.3.14
gnugnutls
3.3.15
gnugnutls
3.3.16
gnugnutls
3.4.0
gnugnutls
3.4.1
gnugnutls
3.4.2
gnugnutls
3.4.3
debiandebian_linux
8.0
𝑥
= Vulnerable software versions
Debian logo
Debian Releases
Debian Product
Codename
gnutls28
bookworm
3.7.9-2+deb12u3
fixed
bullseye
3.7.1-5+deb11u5
fixed
bullseye (security)
3.7.1-5+deb11u6
fixed
sid
3.8.6-2
fixed
trixie
3.8.6-2
fixed
Ubuntu logo
Ubuntu Releases
Ubuntu Product
Codename
gnutls26
artful
dne
bionic
dne
cosmic
dne
disco
dne
precise
not-affected
trusty
not-affected
vivid
dne
wily
dne
xenial
dne
yakkety
dne
zesty
dne
gnutls28
artful
Fixed 3.3.15-5ubuntu2
released
bionic
Fixed 3.3.15-5ubuntu2
released
cosmic
Fixed 3.3.15-5ubuntu2
released
disco
Fixed 3.3.15-5ubuntu2
released
precise
not-affected
trusty
dne
vivid
Fixed 3.3.8-3ubuntu3.1
released
wily
Fixed 3.3.15-5ubuntu2
released
xenial
Fixed 3.3.15-5ubuntu2
released
yakkety
Fixed 3.3.15-5ubuntu2
released
zesty
Fixed 3.3.15-5ubuntu2
released