CVE-2013-2116 in GnuTLS

Sumário (Inglês)

The _gnutls_ciphertext2compressed function in lib/gnutls_cipher.c in GnuTLS 2.12.23 allows remote attackers to cause a denial of service (buffer over-read and crash) via a crafted padding length. NOTE: this might be due to an incorrect fix for CVE-2013-0169.

If you want to get best quality of vulnerability data, you may have to visit VulDB.

Reservar

19/02/2013

Divulgação

03/07/2013

Estado

Confirmado

Inscrições

VulDB provides additional information and datapoints for this CVE:

ID	Vulnerabilidade	CWE	Exp	Con	CVE
8923	GnuTLS gnutls_cipher.c gnutls_ciphertext2compressed Elevação de Privilégios	20	Não definido	Correção oficial	CVE-2013-2116

Fontes

• MITRE
• NVD
• CVE Details