CVE-2015-6251

Double free vulnerability in GnuTLS before 3.3.17 and 3.4.x before 3.4.4 allows remote attackers to cause a denial of service via a long DistinguishedName (DN) entry in a certificate.
ProviderTypeBase ScoreAtk. VectorAtk. ComplexityPriv. RequiredVector
NISTNIST
5 UNKNOWN
NETWORK
LOW
AV:N/AC:L/Au:N/C:N/I:N/A:P
redhatCNA
---
---
CVEADP
---
---
Base Score
CVSS 3.x
EPSS Score
Percentile: 90%
VendorProductVersion
gnugnutls
3.3.0
gnugnutls
3.3.0:pre0
gnugnutls
3.3.1
gnugnutls
3.3.2
gnugnutls
3.3.3
gnugnutls
3.3.4
gnugnutls
3.3.5
gnugnutls
3.3.6
gnugnutls
3.3.7
gnugnutls
3.3.8
gnugnutls
3.3.9
gnugnutls
3.3.10
gnugnutls
3.3.11
gnugnutls
3.3.12
gnugnutls
3.3.13
gnugnutls
3.3.14
gnugnutls
3.3.15
gnugnutls
3.3.16
gnugnutls
3.4.0
gnugnutls
3.4.1
gnugnutls
3.4.2
gnugnutls
3.4.3
debiandebian_linux
8.0
𝑥
= Vulnerable software versions
Debian logo
Debian Releases
Debian Product
Codename
gnutls28
bullseye
3.7.1-5+deb11u5
fixed
bullseye (security)
3.7.1-5+deb11u6
fixed
bookworm
3.7.9-2+deb12u3
fixed
sid
3.8.6-2
fixed
trixie
3.8.6-2
fixed
Ubuntu logo
Ubuntu Releases
Ubuntu Product
Codename
gnutls26
disco
dne
cosmic
dne
bionic
dne
artful
dne
zesty
dne
yakkety
dne
xenial
dne
wily
dne
vivid
dne
trusty
not-affected
precise
not-affected
gnutls28
disco
Fixed 3.3.15-5ubuntu2
released
cosmic
Fixed 3.3.15-5ubuntu2
released
bionic
Fixed 3.3.15-5ubuntu2
released
artful
Fixed 3.3.15-5ubuntu2
released
zesty
Fixed 3.3.15-5ubuntu2
released
yakkety
Fixed 3.3.15-5ubuntu2
released
xenial
Fixed 3.3.15-5ubuntu2
released
wily
Fixed 3.3.15-5ubuntu2
released
vivid
Fixed 3.3.8-3ubuntu3.1
released
trusty
dne
precise
not-affected