All products

Red Hat Enterprise Linux 5/gnutls

Red Hat · Package
17 reports
Vulnerability alerts
Follow
ReportProductEcosystemSeverityFix statusLast updated
gnutls: gnutls does not perform date/time checks on CA certificatesCVE-2014-8155 Red Hat Enterprise Linux 5/gnutls Red Hat Medium No fix reported
HTTPS: block-wise chosen-plaintext attack against SSL/TLS (BEAST)CVE-2011-3389 Red Hat Enterprise Linux 4/gnutlsRed Hat Enterprise Linux 4/java-1.5.0-ibm Red Hat Medium No fix reported
SSL/TLS CRIME attack against HTTPSCVE-2012-4929 Red Hat Enterprise Linux 4/gnutlsRed Hat Enterprise Linux 5/gnutls Red Hat Medium No fix reported
SSL/TLS: Attack against RC4 stream cipherCVE-2013-2566 Red Hat Enterprise Linux 5/gnutlsRed Hat Enterprise Linux 5/nss Red Hat Medium No fix reported
gnutls: certificate algorithm consistency checking issueCVE-2015-0294 Red Hat Enterprise Linux 5/gnutlsRed Hat Enterprise Linux 7/gnutls Red Hat Low No fix reported
gnutls: RSA PKCS#1 signature verification forgeryCVE-2015-0282 Red Hat Enterprise Linux 5/gnutlsRed Hat Enterprise Virtualization 3/mingw-virt-viewer Red Hat Medium No fix reported
SSL/TLS: "Invariance Weakness" vulnerability in RC4 stream cipherCVE-2015-2808 Red Hat Enterprise Linux 5/gnutlsRed Hat Enterprise Linux 5/nss Red Hat Medium No fix reported
libtasn1: infinite loop while parsing DER certificatesCVE-2016-4008 Red Hat Enterprise Linux 5/gnutlsRed Hat Enterprise Linux 6/libtasn1 Red Hat Medium No fix reported
SSL/TLS: Malformed plain-text ALERT packets could cause remote DoSCVE-2016-8610 Red Hat Enterprise Linux 5/gnutlsRed Hat Enterprise Linux 5/openssl097a Red Hat Medium No fix reported
gnutls: Stack overflow in cdk_pk_get_keyidCVE-2017-5336 Red Hat Enterprise Linux 5/gnutls Red Hat Medium No fix reported
gnutls: Out of memory while parsing crafted OpenPGP certificateCVE-2017-5335 Red Hat Enterprise Linux 5/gnutls Red Hat Medium No fix reported
gnutls: Heap read overflow in read-packet.cCVE-2017-5337 Red Hat Enterprise Linux 5/gnutls Red Hat Medium No fix reported
gnutls: Out-of-bounds write related to the cdk_pkt_read function (GNUTLS-SA-2017-3)CVE-2017-7869 Red Hat Enterprise Linux 5/gnutlsRed Hat Enterprise Linux 6/gnutls Red Hat Medium No fix reported
gnutls: "Just in Time" PRIME + PROBE cache-based side channel attack can lead to plaintext recoveryCVE-2018-10846 Red Hat Enterprise Linux 5/gnutlsRed Hat Enterprise Linux 6/gnutls Red Hat Medium No fix reported
gnutls: HMAC-SHA-384 vulnerable to Lucky thirteen attack due to use of wrong constantCVE-2018-10845 Red Hat Enterprise Linux 5/gnutlsRed Hat Enterprise Linux 6/gnutls Red Hat Medium No fix reported
gnutls: HMAC-SHA-256 vulnerable to Lucky thirteen attack due to not enough dummy function callsCVE-2018-10844 Red Hat Enterprise Linux 5/gnutlsRed Hat Enterprise Linux 6/gnutls Red Hat Medium No fix reported
gnutls: Bleichenbacher-like side channel leakage in PKCS#1 v1.5 verification and padding oracle verificationCVE-2018-16868 Red Hat Enterprise Linux 5/gnutlsRed Hat Enterprise Linux 6/gnutls Red Hat Medium No fix reported