MGASA-2014-0248

Dashboard / Vulnerabilities / MGASA-2014-0248

MGASA-2014-0248

Summary: Updated gnutls packages fix CVE-2104-3465-6

Details: Updated gnutls packages fix security vulnerabilities: A NULL pointer dereference flaw was discovered in GnuTLS's gnutls_x509_dn_oid_name(). The function, when called with the GNUTLS_X509_DN_OID_RETURN_OID flag, should not return NULL to its caller. However, it could previously return NULL when parsed X.509 certificates included specific OIDs (CVE-2014-3465). A flaw was found in the way GnuTLS parsed session ids from Server Hello packets of the TLS/SSL handshake. A malicious server could use this flaw to send an excessively long session id value and trigger a buffer overflow in a connecting TLS/SSL client using GnuTLS, causing it to crash or, possibly, execute arbitrary code (CVE-2014-3466).

References: https://advisories.mageia.org/MGASA-2014-0248.html, https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2014-3465, https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2014-3466, http://www.gnutls.org/security.html#GNUTLS-SA-2014-3, https://bugs.mageia.org/show_bug.cgi?id=13457