CVE-2014-3467

中 5.0CVE-2014-3467 · 05/06/2014 公開 · 17/06/2026 更新

要点

CVE-2014-3467 は gnutls (gnu), libtasn1 (gnu), virtualization (redhat) に影響する深刻度「中」 (CVSS 5.0) の脆弱性です。
今後30日間に悪用される確率（EPSS）：6.8%（全脆弱性の 94.0% より高い）。
対処：3.5.7, 3.6 以降に更新してください。

パッケージ	影響を受けるバージョン	修正済みバージョン
gnutls gnu	`< 3.5.7`	`3.5.7`
libtasn1 gnu	`< 3.6`	`3.6`
virtualization redhat	`= 6.0`	修正版なし

概要

Multiple unspecified vulnerabilities in the DER decoder in GNU Libtasn1 before 3.6, as used in GnuTLS, allow remote attackers to cause a denial of service (out-of-bounds read) via crafted ASN.1 data.

参考情報

advisories.mageia.org/MGASA-2014-0247.html · Third Party Advisory
linux.oracle.com/errata/ELSA-2014-0594.html · Third Party Advisory
linux.oracle.com/errata/ELSA-2014-0596.html · Third Party Advisory
lists.gnu.org/archive/html/help-libtasn1/2014-05/msg00006.html · Patch
lists.opensuse.org/opensuse-security-announce/2014-06/msg00002.html · Mailing List
lists.opensuse.org/opensuse-security-announce/2014-06/msg00015.html · Mailing List
rhn.redhat.com/errata/RHSA-2014-0594.html · Third Party Advisory
rhn.redhat.com/errata/RHSA-2014-0596.html · Third Party Advisory
rhn.redhat.com/errata/RHSA-2014-0687.html · Third Party Advisory
rhn.redhat.com/errata/RHSA-2014-0815.html · Third Party Advisory
secunia.com/advisories/58591 · Third Party Advisory
secunia.com/advisories/58614 · Third Party Advisory
secunia.com/advisories/59021 · Third Party Advisory
secunia.com/advisories/59057 · Third Party Advisory
secunia.com/advisories/59408 · Third Party Advisory
secunia.com/advisories/60320 · Third Party Advisory
secunia.com/advisories/60415 · Third Party Advisory
secunia.com/advisories/61888 · Third Party Advisory
support.f5.com/kb/en-us/solutions/public/15000/400/sol15423.html · Third Party Advisory
debian.org/security/2014/dsa-3056 · Third Party Advisory
mandriva.com/security/advisories · Third Party Advisory
novell.com/support/kb/doc.php · Third Party Advisory
novell.com/support/kb/doc.php · Third Party Advisory
bugzilla.redhat.com/show_bug.cgi · Issue Tracking

gnutls のその他の脆弱性

すべて見る →

これらの製品をお使いですか？サイトをスキャンして、脆弱なバージョンが公開されていないか確認しましょう。

無料でサイトをスキャン