GCVE - cpe:2.3:a:gnu:gnutls:3.0.17:*:*:*:*:*:*:*

Approved changes feed: RSS · Atom

cpe:2.3:a:gnu:gnutls:3.0.17:*:*:*:*:*:*:*

part: a version: 3.0.17 update: *

Vendor	Gnu (`575dd98a-a14a-5d9e-a2eb-97d38d86fcb9`)
Product	Gnutls (`955d43fd-13b7-57ed-9845-207af9eef570`)
Edition	*
Language	*
Software edition	*
Target software	*
Target hardware	*
Other	*
Notes	Imported from NVD CPE 2.0 feed

PURL mappings

PURL	Source	Last updated
`pkg:github/gnutls/gnutls`	purl2cpe	2026-06-01 10:11:56.107548
`pkg:gitlab/gnutls/gnutls`	purl2cpe	2026-06-01 10:11:56.107549
`pkg:gnu/gnutls`	purl2cpe	2026-06-01 10:11:56.107551
`pkg:rpm/fedora/gnutls`	purl2cpe	2026-06-01 10:11:56.107552
`pkg:rpm/opensuse/gnutls`	purl2cpe	2026-06-01 10:11:56.107553

Vulnerability references

Identifier	cpeApplicability	Submitted	db.gcve.eu details	Rationale
`CVE:CVE-2014-8564`	vulnerable	2026-06-08 05:06:09.345378	Details available The _gnutls_ecc_ansi_x963_export function in gnutls_ecc.c in GnuTLS 3.x before 3.1.28, 3.2.x before 3.2.20, and 3.3.x before 3.3.10 allows remote attackers to cause a denial of service (out-of-bounds write) via a crafted (1) Elliptic Curve Cryptography (ECC) certificate or (2) certificate signing requests (CSR), related to generating key IDs. Published: 2014-11-13T15:00:00.000Z Updated: 2024-08-06T13:18:48.419Z Open on db.gcve.eu Reference links http://secunia.com/advisories/59991 http://rhn.redhat.com/errata/RHSA-2014-1846.html http://www.ubuntu.com/usn/USN-2403-1 http://secunia.com/advisories/62294 https://bugzilla.redhat.com/show_bug.cgi?id=1161443	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2014-3465`	vulnerable	2026-06-08 05:05:32.754999	Details available The gnutls_x509_dn_oid_name function in lib/x509/common.c in GnuTLS 3.0 before 3.1.20 and 3.2.x before 3.2.10 allows remote attackers to cause a denial of service (NULL pointer dereference) via a crafted X.509 certificate, related to a missing LDAP description for an OID when printing the DN. Published: 2014-06-10T14:00:00.000Z Updated: 2024-08-06T10:43:06.429Z Open on db.gcve.eu Reference links http://lists.gnutls.org/pipermail/gnutls-help/2014-January/003326.html https://bugzilla.redhat.com/show_bug.cgi?id=1101734 http://secunia.com/advisories/59086 http://rhn.redhat.com/errata/RHSA-2014-0684.html http://lists.opensuse.org/opensuse-security-announce/2014-06/msg00007.html	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2013-1619`	vulnerable	2026-06-08 05:03:55.016982	Details available The TLS implementation in GnuTLS before 2.12.23, 3.0.x before 3.0.28, and 3.1.x before 3.1.7 does not properly consider timing side-channel attacks on a noncompliant MAC check operation during the processing of malformed CBC padding, which allows remote attackers to conduct distinguishing attacks and plaintext-recovery attacks via statistical analysis of timing data for crafted packets, a related issue to CVE-2013-0169. Published: 2013-02-08T19:00:00.000Z Updated: 2024-08-06T15:04:49.607Z Open on db.gcve.eu Reference links http://secunia.com/advisories/57260 https://gitorious.org/gnutls/gnutls/commit/328ee22c1b3951e060c7124c7cb1cee592c59bc0 http://www.gnutls.org/security.html#GNUTLS-SA-2013-1 http://www.isg.rhul.ac.uk/tls/TLStiming.pdf http://secunia.com/advisories/57274	Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.