CVE-2015-3308

概要

参考情報

• lists.fedoraproject.org/pipermail/package-announce/2015-April/155101.html
• gnutls.org/security.html
• openwall.com/lists/oss-security/2015/04/15/6
• openwall.com/lists/oss-security/2015/04/16/6
• securityfocus.com/bid/74188
• securitytracker.com/id/1033774
• ubuntu.com/usn/USN-2727-1
• gitlab.com/gnutls/gnutls/commit/053ae65403216acdb0a4e78b25ad66ee9f444f02
• gitlab.com/gnutls/gnutls/commit/d6972be33264ecc49a86cd0958209cd7363af1e9
• security.gentoo.org/glsa/201506-03

gnutls のその他の脆弱性

• CVE-2025-32988高 8.2A flaw was found in GnuTLS. A double-free vulnerability exists in GnuTLS due to incorrect ownership handling in the export logic of Subject …
• CVE-2024-0567高 7.5A vulnerability was found in GnuTLS, where a cockpit (which uses gnuTLS) rejects a certificate chain with distributed trust. This issue occu…
• CVE-2024-0553高 7.5A vulnerability was found in GnuTLS. The response times to malformed ciphertexts in RSA-PSK ClientKeyExchange differ from the response times…
• CVE-2023-5981中 5.9A vulnerability was found that the response times to malformed ciphertexts in RSA-PSK ClientKeyExchange differ from response times of cipher…
• CVE-2023-0361高 7.4A timing side-channel in the handling of RSA ClientKeyExchange messages was discovered in GnuTLS. This side-channel can be sufficient to rec…