CVE-2014-3466 in GnuTLS
Zusammenfassung (Englisch)
Buffer overflow in the read_server_hello function in lib/gnutls_handshake.c in GnuTLS before 3.1.25, 3.2.x before 3.2.15, and 3.3.x before 3.3.4 allows remote servers to cause a denial of service (memory corruption) or possibly execute arbitrary code via a long session id in a ServerHello message.
If you want to get best quality of vulnerability data, you may have to visit VulDB.
Reservieren
14.05.2014
Veröffentlichung
03.06.2014
Status
Bestätigt
Einträge
VulDB provides additional information and datapoints for this CVE:
| ID | Schwachstelle | CWE | Aus | Mas | CVE |
|---|---|---|---|---|---|
| 13407 | GnuTLS Session ID gnutls_handshake.c read_server_hello Pufferüberlauf | 119 | Proof-of-Concept | Offizieller Fix | CVE-2014-3466 |