National Cyber-Alert System
Vulnerability Summary for CVE-2008-1949
Original release date:05/21/2008
Last revised:03/13/2009
Source:
US-CERT/NIST
Overview
The _gnutls_recv_client_kx_message function in lib/gnutls_kx.c in libgnutls in gnutls-serv in GnuTLS before 2.2.4 continues to process Client Hello messages within a TLS message after one has already been processed, which allows remote attackers to cause a denial of service (NULL dereference and crash) via a TLS message containing multiple Client Hello messages, aka GNUTLS-SA-2008-1-2.
Impact
CVSS Severity (version 2.0):
Impact Subscore:
10.0
Exploitability Subscore:
8.6
CVSS Version 2 Metrics:
Access Vector: Network exploitable
Access Complexity: Medium
Authentication: Not required to exploit
Impact Type:Provides administrator access, Allows complete confidentiality, integrity, and availability violation; Allows unauthorized disclosure of information; Allows disruption of service
References to Advisories, Solutions, and Tools
By selecting these links, you will be leaving NIST webspace. We have provided these links to other web sites because they may have information that would be of interest to you. No inferences should be drawn on account of other sites being referenced, or not, from this page. There may be other web sites that are more appropriate for your purpose. NIST does not necessarily endorse the views expressed, or concur with the facts presented on these sites. Further, NIST does not endorse any commercial products that may be mentioned on these sites. Please address comments about this page to nvd@nist.gov.
US-CERT Vulnerability Note: VU#252626
Name: VU#252626
External Source: BID
Name: 29292
Type: Patch Information
External Source: FEDORA
Name: FEDORA-2008-4274
External Source: FEDORA
Name: FEDORA-2008-4259
External Source: FEDORA
Name: FEDORA-2008-4183
External Source: CONFIRM
Name: https://issues.rpath.com/browse/RPL-2552
External Source: XF
Name: gnutls-gnutlsrecvclientkxmessage-bo(42530)
External Source: UBUNTU
Name: USN-613-1
External Source: SECTRACK
Name: 1020058
External Source: BUGTRAQ
Name: 20080522 rPSA-2008-0174-1 gnutls
External Source: BUGTRAQ
Name: 20080520 Vulnerability Advisory on GnuTLS
External Source: REDHAT
Name: RHSA-2008:0492
External Source: REDHAT
Name: RHSA-2008:0489
External Source: MLIST
Name: [oss-security] 20080520 Re: CVE ID request: GNUTLS
External Source: MLIST
Name: [oss-security] 20080520 Re: CVE ID request: GNUTLS
External Source: MLIST
Name: [oss-security] 20080520 Re: CVE ID request: GNUTLS
External Source: MANDRIVA
Name: MDVSA-2008:106
External Source: VUPEN
Name: ADV-2008-1583
Type: Advisory
External Source: VUPEN
Name: ADV-2008-1582
Type: Advisory
External Source: DEBIAN
Name: DSA-1581
External Source: MISC
Name: http://www.cert.fi/haavoittuvuudet/advisory-gnutls.html
External Source: CONFIRM
Name: http://wiki.rpath.com/wiki/Advisories:rPSA-2008-0174
External Source: CONFIRM
Name: http://sourceforge.net/project/shownotes.php?release_id=600646&group_id=21558
External Source: SREASON
Name: 3902
External Source: GENTOO
Name: GLSA-200805-20
External Source: SECUNIA
Name: 31939
External Source: SECUNIA
Name: 30355
External Source: SECUNIA
Name: 30338
Type: Advisory
External Source: SECUNIA
Name: 30331
Type: Advisory
External Source: SECUNIA
Name: 30330
Type: Advisory
External Source: SECUNIA
Name: 30324
Type: Advisory
External Source: SECUNIA
Name: 30317
Type: Advisory
External Source: SECUNIA
Name: 30302
Type: Advisory
External Source: SECUNIA
Name: 30287
Type: Advisory
External Source: SUSE
Name: SUSE-SA:2008:046
External Source: MLIST
Name: [gnutls-devel] 20080519 GnuTLS 2.2.5 - Brown paper bag release
External Source: MLIST
Name: [gnutls-devel] 20080519 Re: GnuTLS 2.2.4 - Security release [GNUTLS-SA-2008-1]
External Source: MLIST
Name: [gnutls-devel] 20080519 GnuTLS 2.2.4 - Security release [GNUTLS-SA-2008-1]
External Source: CONFIRM
Name: http://git.savannah.gnu.org/gitweb/?p=gnutls.git;a=commitdiff;h=bc8102405fda11ea00ca3b42acc4f4bce9d6e97b
