bugtraq - Vulnerability Advisory on GnuTLS

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev] [next>] [day] [month] [year] [list]

Message-ID: <20080520141709.400.qmail@securityfocus.com>
Date: 20 May 2008 14:17:09 -0000
From: josh@...enomicon.com
To: bugtraq@...urityfocus.com
Subject: Vulnerability Advisory on GnuTLS

GnuTLS has been proven to be vulnerable prior to version 2.2.5.

The vulnerabilities can expose Denial-of-Service (DoS) and buffer overflow conditions. Further investigation is needed but maybe possible for an attacker to execute code on the affected system.

Please see the advisory for more information:
http://www.cert.fi/haavoittuvuudet/advisory-gnutls.html

http://lists.gnu.org/archive/html/gnutls-devel/2008-05/msg00060.html