GnuTLS 'x509_ext.c' Use After Free Denial of Service Vulnerability

Bugtraq ID: 74188
Class: Failure to Handle Exceptional Conditions
CVE: CVE-2015-3308
Remote: Yes
Local: No
Published: Apr 16 2015 12:00AM
Updated: Oct 26 2015 04:22PM
Credit: Robert Swiecki
Vulnerable: GNU GnuTLS 2.8.3
GNU GnuTLS 2.8.2
GNU GnuTLS 2.8.1
GNU GnuTLS 2.6.6
GNU GnuTLS 2.6.5
GNU GnuTLS 2.6.4
GNU GnuTLS 2.6.3
GNU GnuTLS 2.6.2
GNU GnuTLS 2.6.1
GNU GnuTLS 2.6
GNU GnuTLS 2.4.1
GNU GnuTLS 2.4
GNU GnuTLS 2.2.5
GNU GnuTLS 2.2.4
GNU GnuTLS 2.2.3
GNU GnuTLS 2.2.2
GNU GnuTLS 2.2.1
GNU GnuTLS 2.2
GNU GnuTLS 2.0
GNU GnuTLS 1.4.3
GNU GnuTLS 1.4.2
GNU GnuTLS 1.4
GNU GnuTLS 1.3.4
GNU GnuTLS 1.3.3
GNU GnuTLS 1.3.2
GNU GnuTLS 1.3.1
GNU GnuTLS 1.3
GNU GnuTLS 1.2.10
GNU GnuTLS 1.2.9
GNU GnuTLS 1.2.8
GNU GnuTLS 1.2.7
GNU GnuTLS 1.2.6
GNU GnuTLS 1.2.5
GNU GnuTLS 1.2.4
GNU GnuTLS 1.2.3
GNU GnuTLS 1.2.2
GNU GnuTLS 1.2.1
GNU GnuTLS 1.2
GNU GnuTLS 1.0.25
+ Red Hat Fedora Core4
GNU GnuTLS 1.0.23
+ Red Hat Fedora Core4
GNU GnuTLS 1.0.20
GNU GnuTLS 1.0.17
GNU GnuTLS 1.0.16
GNU GnuTLS 1.0.15
GNU GnuTLS 1.0.14
GNU GnuTLS 1.0.13
GNU GnuTLS 1.0.9
GNU GnuTLS 1.0.8
GNU GnuTLS 1.0.7
GNU GnuTLS 1.0.6
GNU GnuTLS 1.0.5
GNU GnuTLS 1.0.4
GNU GnuTLS 1.0.3
GNU GnuTLS 1.0.2
GNU GnuTLS 1.0.1
GNU GnuTLS 1.0
GNU GnuTLS 3.0.7
GNU GnuTLS 3.0.6
GNU GnuTLS 3.0.16
GNU GnuTLS 3.0.15
GNU GnuTLS 3.0.14
GNU GnuTLS 3.0.11
GNU GnuTLS 3.0.10
GNU GnuTLS 2.12.14
GNU GnuTLS 2.12.13
Not Vulnerable:


 

Privacy Statement
Copyright 2010, SecurityFocus