CVE-2015-3308

Description

References

• lists.fedoraproject.org/pipermail/package-announce/2015-April/155101.html
• gnutls.org/security.html
• openwall.com/lists/oss-security/2015/04/15/6
• openwall.com/lists/oss-security/2015/04/16/6
• securityfocus.com/bid/74188
• securitytracker.com/id/1033774
• ubuntu.com/usn/USN-2727-1
• gitlab.com/gnutls/gnutls/commit/053ae65403216acdb0a4e78b25ad66ee9f444f02
• gitlab.com/gnutls/gnutls/commit/d6972be33264ecc49a86cd0958209cd7363af1e9
• security.gentoo.org/glsa/201506-03

Weitere Schwachstellen in gnutls

• CVE-2025-32988HOCH 8.2A flaw was found in GnuTLS. A double-free vulnerability exists in GnuTLS due to incorrect ownership handling in the export logic of Subject …
• CVE-2024-0567HOCH 7.5A vulnerability was found in GnuTLS, where a cockpit (which uses gnuTLS) rejects a certificate chain with distributed trust. This issue occu…
• CVE-2024-0553HOCH 7.5A vulnerability was found in GnuTLS. The response times to malformed ciphertexts in RSA-PSK ClientKeyExchange differ from the response times…
• CVE-2023-5981MITTEL 5.9A vulnerability was found that the response times to malformed ciphertexts in RSA-PSK ClientKeyExchange differ from response times of cipher…
• CVE-2023-0361HOCH 7.4A timing side-channel in the handling of RSA ClientKeyExchange messages was discovered in GnuTLS. This side-channel can be sufficient to rec…