Уязвимость CVE-2014-0092: Информация

Описание

lib/x509/verify.c in GnuTLS before 3.1.22 and 3.2.x before 3.2.12 does not properly handle unspecified errors when verifying X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers via a crafted certificate.

Важность: MEDIUM (5,8)

Исправленные пакеты

Ссылки на рекомендации, решения и инструменты

1. Подверженные конфигурации:

   1. Конфигурация 1

      cpe:2.3:a:gnu:gnutls:3.2.3:*:*:*:*:*:*:*

      ---

      cpe:2.3:a:gnu:gnutls:3.2.0:*:*:*:*:*:*:*

      ---

      cpe:2.3:a:gnu:gnutls:3.2.1:*:*:*:*:*:*:*

      ---

      cpe:2.3:a:gnu:gnutls:3.2.8:*:*:*:*:*:*:*

      ---

      cpe:2.3:a:gnu:gnutls:3.2.4:*:*:*:*:*:*:*

      ---

      cpe:2.3:a:gnu:gnutls:3.2.9:*:*:*:*:*:*:*

      ---

      cpe:2.3:a:gnu:gnutls:3.2.6:*:*:*:*:*:*:*

      ---

      cpe:2.3:a:gnu:gnutls:3.2.10:*:*:*:*:*:*:*

      ---

      cpe:2.3:a:gnu:gnutls:*:*:*:*:*:*:*:*

      End including

      3.2.11

      ---

      cpe:2.3:a:gnu:gnutls:3.2.7:*:*:*:*:*:*:*

      ---

      cpe:2.3:a:gnu:gnutls:3.2.2:*:*:*:*:*:*:*

      ---

      cpe:2.3:a:gnu:gnutls:3.2.5:*:*:*:*:*:*:*

      ---

      cpe:2.3:a:gnu:gnutls:3.2.8.1:*:*:*:*:*:*:*

      ---

      Конфигурация 2

      cpe:2.3:a:gnu:gnutls:3.1.0:*:*:*:*:*:*:*

      ---

      cpe:2.3:a:gnu:gnutls:3.1.11:*:*:*:*:*:*:*

      ---

      cpe:2.3:a:gnu:gnutls:3.1.13:*:*:*:*:*:*:*

      ---

      cpe:2.3:a:gnu:gnutls:3.1.20:*:*:*:*:*:*:*

      ---

      cpe:2.3:a:gnu:gnutls:3.1.19:*:*:*:*:*:*:*

      ---

      cpe:2.3:a:gnu:gnutls:3.1.18:*:*:*:*:*:*:*

      ---

      cpe:2.3:a:gnu:gnutls:3.1.5:*:*:*:*:*:*:*

      ---

      cpe:2.3:a:gnu:gnutls:*:*:*:*:*:*:*:*

      End including

      3.1.21

      ---

      cpe:2.3:a:gnu:gnutls:3.1.15:*:*:*:*:*:*:*

      ---

      cpe:2.3:a:gnu:gnutls:3.1.4:*:*:*:*:*:*:*

      ---

      cpe:2.3:a:gnu:gnutls:3.1.8:*:*:*:*:*:*:*

      ---

      cpe:2.3:a:gnu:gnutls:3.1.16:*:*:*:*:*:*:*

      ---

      cpe:2.3:a:gnu:gnutls:3.1.1:*:*:*:*:*:*:*

      ---

      cpe:2.3:a:gnu:gnutls:3.1.17:*:*:*:*:*:*:*

      ---

      cpe:2.3:a:gnu:gnutls:3.1.12:*:*:*:*:*:*:*

      ---

      cpe:2.3:a:gnu:gnutls:3.1.10:*:*:*:*:*:*:*

      ---

      cpe:2.3:a:gnu:gnutls:3.1.7:*:*:*:*:*:*:*

      ---

      cpe:2.3:a:gnu:gnutls:3.1.2:*:*:*:*:*:*:*

      ---

      cpe:2.3:a:gnu:gnutls:3.1.14:*:*:*:*:*:*:*

      ---

      cpe:2.3:a:gnu:gnutls:3.1.3:*:*:*:*:*:*:*

      ---

      cpe:2.3:a:gnu:gnutls:3.1.6:*:*:*:*:*:*:*

      ---

      cpe:2.3:a:gnu:gnutls:3.1.9:*:*:*:*:*:*:*

      ---