From 2b363e71ee1217e9a7097d661521c22b77e919bd Mon Sep 17 00:00:00 2001 From: wg Date: Fri, 25 Oct 2013 15:55:40 +0000 Subject: - Document gnutls3 denial of service CVE --- security/vuxml/vuln.xml | 28 ++++++++++++++++++++++++++++ 1 file changed, 28 insertions(+) (limited to 'security') diff --git a/security/vuxml/vuln.xml b/security/vuxml/vuln.xml index 881182327d99..7fc13473ebd1 100644 --- a/security/vuxml/vuln.xml +++ b/security/vuxml/vuln.xml @@ -51,6 +51,34 @@ Note: Please add new entries to the beginning of this file. --> + + gnutls -- denial of service + + + gnutls3 + 3.1.15 + + + + +

Salvatore Bonaccorso reports:

+
This vulnerability affects the DANE library of gnutls 3.1.x and + gnutls 3.2.x. A server that returns more 4 DANE entries could + corrupt the memory of a requesting client.
+

+ + + + CVE-2013-4466 + http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-4466 + + + 2013-10-25 + 2013-10-25 + + + xorg-server -- use after free -- cgit