CVE-2008-1949:详情

CVE-2008-1949

15.17%V4
2008-05-21
10h00 +00:00
Authorization problems
A07-Identif. and Authent. Fail
Network
2024-08-07
08h41 +00:00
指定 CVE 通知
随时了解指定 CVE 的变更。
管理通知

CVE 描述

The _gnutls_recv_client_kx_message function in lib/gnutls_kx.c in libgnutls in gnutls-serv in GnuTLS before 2.2.4 continues to process Client Hello messages within a TLS message after one has already been processed, which allows remote attackers to cause a denial of service (NULL dereference and crash) via a TLS message containing multiple Client Hello messages, aka GNUTLS-SA-2008-1-2.

CVE 信息

相关弱点

CWE-ID 弱点名称 来源
CWE-287 Improper Authentication
When an actor claims to have a given identity, the product does not prove or insufficiently proves that the claim is correct.

指标

指标 评分 严重程度 CVSS 向量 来源
V2 9.3 AV:N/AC:M/Au:N/C:C/I:C/A:C nvd@nist.gov

EPSS

EPSS 是一种预测漏洞被利用可能性的评分模型。

EPSS 评分

EPSS 模型生成一个介于 0 到 1(即 0% 到 100%)之间的概率评分。评分越高,漏洞被利用的可能性越大。

EPSS 百分位

百分位用于根据 EPSS 评分对 CVE 进行排名。例如,EPSS 百分位为第 95 的 CVE,其被利用的可能性高于 95% 的其他 CVE。因此,百分位可用于比较不同 CVE 的 EPSS 评分。

相关产品

配置 0

Gnu>>Gnutls >> Version 1.0.18

Gnu>>Gnutls >> Version 1.0.19

Gnu>>Gnutls >> Version 1.0.20

Gnu>>Gnutls >> Version 1.0.21

Gnu>>Gnutls >> Version 1.0.22

Gnu>>Gnutls >> Version 1.0.23

Gnu>>Gnutls >> Version 1.0.24

Gnu>>Gnutls >> Version 1.0.25

Gnu>>Gnutls >> Version 1.1.13

Gnu>>Gnutls >> Version 1.1.14

Gnu>>Gnutls >> Version 1.1.15

Gnu>>Gnutls >> Version 1.1.16

Gnu>>Gnutls >> Version 1.1.17

Gnu>>Gnutls >> Version 1.1.18

Gnu>>Gnutls >> Version 1.1.19

Gnu>>Gnutls >> Version 1.1.20

Gnu>>Gnutls >> Version 1.1.21

Gnu>>Gnutls >> Version 1.1.22

Gnu>>Gnutls >> Version 1.1.23

Gnu>>Gnutls >> Version 1.2.0

Gnu>>Gnutls >> Version 1.2.1

Gnu>>Gnutls >> Version 1.2.2

Gnu>>Gnutls >> Version 1.2.3

Gnu>>Gnutls >> Version 1.2.4

Gnu>>Gnutls >> Version 1.2.5

Gnu>>Gnutls >> Version 1.2.6

Gnu>>Gnutls >> Version 1.2.7

Gnu>>Gnutls >> Version 1.2.8

Gnu>>Gnutls >> Version 1.2.9

Gnu>>Gnutls >> Version 1.2.10

Gnu>>Gnutls >> Version 1.2.11

Gnu>>Gnutls >> Version 1.3.0

Gnu>>Gnutls >> Version 1.3.1

Gnu>>Gnutls >> Version 1.3.2

Gnu>>Gnutls >> Version 1.3.3

Gnu>>Gnutls >> Version 1.3.4

Gnu>>Gnutls >> Version 1.3.5

Gnu>>Gnutls >> Version 1.4.0

Gnu>>Gnutls >> Version 1.4.1

Gnu>>Gnutls >> Version 1.4.2

Gnu>>Gnutls >> Version 1.4.3

Gnu>>Gnutls >> Version 1.4.4

Gnu>>Gnutls >> Version 1.4.5

Gnu>>Gnutls >> Version 1.5.0

Gnu>>Gnutls >> Version 1.5.1

Gnu>>Gnutls >> Version 1.5.2

Gnu>>Gnutls >> Version 1.5.3

Gnu>>Gnutls >> Version 1.5.4

Gnu>>Gnutls >> Version 1.5.5

Gnu>>Gnutls >> Version 1.6.0

Gnu>>Gnutls >> Version 1.6.1

Gnu>>Gnutls >> Version 1.6.2

Gnu>>Gnutls >> Version 1.6.3

Gnu>>Gnutls >> Version 1.7.0

Gnu>>Gnutls >> Version 1.7.1

Gnu>>Gnutls >> Version 1.7.2

Gnu>>Gnutls >> Version 1.7.3

Gnu>>Gnutls >> Version 1.7.4

Gnu>>Gnutls >> Version 1.7.5

Gnu>>Gnutls >> Version 1.7.6

Gnu>>Gnutls >> Version 1.7.7

Gnu>>Gnutls >> Version 1.7.8

Gnu>>Gnutls >> Version 1.7.9

Gnu>>Gnutls >> Version 1.7.10

Gnu>>Gnutls >> Version 1.7.11

Gnu>>Gnutls >> Version 1.7.12

Gnu>>Gnutls >> Version 1.7.13

Gnu>>Gnutls >> Version 1.7.14

Gnu>>Gnutls >> Version 1.7.15

Gnu>>Gnutls >> Version 1.7.16

Gnu>>Gnutls >> Version 1.7.17

Gnu>>Gnutls >> Version 1.7.18

Gnu>>Gnutls >> Version 1.7.19

Gnu>>Gnutls >> Version 2.0.0

Gnu>>Gnutls >> Version 2.0.1

Gnu>>Gnutls >> Version 2.0.2

Gnu>>Gnutls >> Version 2.0.3

Gnu>>Gnutls >> Version 2.0.4

Gnu>>Gnutls >> Version 2.1.0

Gnu>>Gnutls >> Version 2.1.1

Gnu>>Gnutls >> Version 2.1.2

Gnu>>Gnutls >> Version 2.1.3

Gnu>>Gnutls >> Version 2.1.4

Gnu>>Gnutls >> Version 2.1.5

Gnu>>Gnutls >> Version 2.1.6

Gnu>>Gnutls >> Version 2.1.7

Gnu>>Gnutls >> Version 2.1.8

Gnu>>Gnutls >> Version 2.2.0

Gnu>>Gnutls >> Version 2.2.1

Gnu>>Gnutls >> Version 2.2.2

Gnu>>Gnutls >> Version 2.2.3

Gnu>>Gnutls >> Version 2.2.4

Gnu>>Gnutls >> Version 2.2.5

Gnu>>Gnutls >> Version 2.3.0

Gnu>>Gnutls >> Version 2.3.1

Gnu>>Gnutls >> Version 2.3.2

Gnu>>Gnutls >> Version 2.3.3

Gnu>>Gnutls >> Version 2.3.4

Gnu>>Gnutls >> Version 2.3.5

Gnu>>Gnutls >> Version 2.3.6

Gnu>>Gnutls >> Version 2.3.7

Gnu>>Gnutls >> Version 2.3.8

Gnu>>Gnutls >> Version 2.3.9

Gnu>>Gnutls >> Version 2.3.10

Gnu>>Gnutls >> Version 2.3.11

参考资料

http://secunia.com/advisories/30331
Tags : third-party-advisory, x_refsource_SECUNIA
http://secunia.com/advisories/31939
Tags : third-party-advisory, x_refsource_SECUNIA
http://www.ubuntu.com/usn/usn-613-1
Tags : vendor-advisory, x_refsource_UBUNTU
http://www.redhat.com/support/errata/RHSA-2008-0492.html
Tags : vendor-advisory, x_refsource_REDHAT
http://www.openwall.com/lists/oss-security/2008/05/20/1
Tags : mailing-list, x_refsource_MLIST
http://security.gentoo.org/glsa/glsa-200805-20.xml
Tags : vendor-advisory, x_refsource_GENTOO
http://secunia.com/advisories/30355
Tags : third-party-advisory, x_refsource_SECUNIA
http://secunia.com/advisories/30317
Tags : third-party-advisory, x_refsource_SECUNIA
http://www.redhat.com/support/errata/RHSA-2008-0489.html
Tags : vendor-advisory, x_refsource_REDHAT
http://secunia.com/advisories/30324
Tags : third-party-advisory, x_refsource_SECUNIA
http://secunia.com/advisories/30302
Tags : third-party-advisory, x_refsource_SECUNIA
http://www.securityfocus.com/bid/29292
Tags : vdb-entry, x_refsource_BID
http://secunia.com/advisories/30330
Tags : third-party-advisory, x_refsource_SECUNIA
http://www.openwall.com/lists/oss-security/2008/05/20/3
Tags : mailing-list, x_refsource_MLIST
http://secunia.com/advisories/30338
Tags : third-party-advisory, x_refsource_SECUNIA
http://www.debian.org/security/2008/dsa-1581
Tags : vendor-advisory, x_refsource_DEBIAN
http://www.openwall.com/lists/oss-security/2008/05/20/2
Tags : mailing-list, x_refsource_MLIST
http://securityreason.com/securityalert/3902
Tags : third-party-advisory, x_refsource_SREASON
http://secunia.com/advisories/30287
Tags : third-party-advisory, x_refsource_SECUNIA
http://www.securitytracker.com/id?1020058
Tags : vdb-entry, x_refsource_SECTRACK
http://www.mandriva.com/security/advisories?name=MDVSA-2008:106
Tags : vendor-advisory, x_refsource_MANDRIVA
http://www.kb.cert.org/vuls/id/252626
Tags : third-party-advisory, x_refsource_CERT-VN