CVE-2013-2116 in GnuTLS
Summary
The _gnutls_ciphertext2compressed function in lib/gnutls_cipher.c in GnuTLS 2.12.23 allows remote attackers to cause a denial of service (buffer over-read and crash) via a crafted padding length. NOTE: this might be due to an incorrect fix for CVE-2013-0169.
Reservation
02/19/2013
Disclosure
07/03/2013
Entries
VulDB provides additional information and datapoints for this CVE:
| ID | Vulnerability | CWE | Exp | Cou | CVE |
|---|---|---|---|---|---|
| 8923 | GnuTLS gnutls_cipher.c gnutls_ciphertext2compressed input validation | 20 | Not defined | Official fix | CVE-2013-2116 |