• info
• discussion
• exploit
• solution
• references

GNUTLS Padding Denial of Service Vulnerability

GnuTLS is prone to a denial-of-service vulnerability. A remote attacker can send specifically designed data to cause a flaw in the parsing, leading to denial-of-service conditions.

This issue has been addressed in GnuTLS versions 1.0.25 and 1.2.3; earlier versions are vulnerable.