GCVE - cpe:2.3:a:gnu:gnutls:1.0.25:*:*:*:*:*:*:*

Approved changes feed: RSS · Atom

cpe:2.3:a:gnu:gnutls:1.0.25:*:*:*:*:*:*:*

part: a version: 1.0.25 update: *

Vendor	Gnu (`575dd98a-a14a-5d9e-a2eb-97d38d86fcb9`)
Product	Gnutls (`955d43fd-13b7-57ed-9845-207af9eef570`)
Edition	*
Language	*
Software edition	*
Target software	*
Target hardware	*
Other	*
Notes	Imported from NVD CPE 2.0 feed

PURL mappings

PURL	Source	Last updated
`pkg:github/gnutls/gnutls`	purl2cpe	2026-06-01 10:11:55.742997
`pkg:gitlab/gnutls/gnutls`	purl2cpe	2026-06-01 10:11:55.742998
`pkg:gnu/gnutls`	purl2cpe	2026-06-01 10:11:55.742999
`pkg:rpm/fedora/gnutls`	purl2cpe	2026-06-01 10:11:55.743001
`pkg:rpm/opensuse/gnutls`	purl2cpe	2026-06-01 10:11:55.743002

Vulnerability references

Identifier	cpeApplicability	Submitted	db.gcve.eu details	Rationale
`CVE:CVE-2012-1663`	vulnerable	2026-06-08 05:00:50.228283	Details available Double free vulnerability in libgnutls in GnuTLS before 3.0.14 allows remote attackers to cause a denial of service (application crash) or possibly have unspecified other impact via a crafted certificate list. Published: 2012-03-13T22:00:00.000Z Updated: 2024-08-06T19:01:02.915Z Open on db.gcve.eu Reference links https://exchange.xforce.ibmcloud.com/vulnerabilities/74099 http://www.exploit-db.com/exploits/24865 http://article.gmane.org/gmane.comp.encryption.gpg.gnutls.devel/5866	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2012-1569`	vulnerable	2026-06-08 05:00:49.422737	Details available The asn1_get_length_der function in decoding.c in GNU Libtasn1 before 2.12, as used in GnuTLS before 3.0.16 and other products, does not properly handle certain large length values, which allows remote attackers to cause a denial of service (heap memory corruption and application crash) or possibly have unspecified other impact via a crafted ASN.1 structure. Published: 2012-03-26T19:00:00.000Z Updated: 2024-08-06T19:01:02.196Z Open on db.gcve.eu Reference links http://secunia.com/advisories/57260 http://rhn.redhat.com/errata/RHSA-2012-0427.html http://secunia.com/advisories/48578 http://rhn.redhat.com/errata/RHSA-2012-0531.html http://secunia.com/advisories/49002	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2010-0731`	vulnerable	2026-06-08 04:52:04.156729	Details available The gnutls_x509_crt_get_serial function in the GnuTLS library before 1.2.1, when running on big-endian, 64-bit platforms, calls the asn1_read_value with a pointer to the wrong data type and the wrong length value, which allows remote attackers to bypass the certificate revocation list (CRL) check and cause a stack-based buffer overflow via a crafted X.509 certificate, related to extraction of a serial number. Published: 2010-03-26T18:00:00.000Z Updated: 2024-08-07T00:59:39.012Z Open on db.gcve.eu Reference links http://www.redhat.com/support/errata/RHSA-2010-0167.html http://secunia.com/advisories/39127 http://www.mandriva.com/security/advisories?name=MDVSA-2010:089 http://www.securityfocus.com/bid/38959 http://www.vupen.com/english/advisories/2010/0713	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2009-2730`	vulnerable	2026-06-08 04:51:30.242108	Details available libgnutls in GnuTLS before 2.8.2 does not properly handle a '\0' character in a domain name in the subject's (1) Common Name (CN) or (2) Subject Alternative Name (SAN) field of an X.509 certificate, which allows man-in-the-middle attackers to spoof arbitrary SSL servers via a crafted certificate issued by a legitimate Certification Authority. Published: 2009-08-12T10:00:00.000Z Updated: 2024-08-07T05:59:57.016Z Open on db.gcve.eu Reference links https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A8409 http://www.securitytracker.com/id?1022777 http://www.vmware.com/security/advisories/VMSA-2009-0016.html http://www.openwall.com/lists/oss-security/2009/08/14/6 http://www.redhat.com/support/errata/RHSA-2009-1232.html	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2009-2409`	vulnerable	2026-06-08 04:51:28.267719	Details available The Network Security Services (NSS) library before 3.12.3, as used in Firefox; GnuTLS before 2.6.4 and 2.7.4; OpenSSL 0.9.8 through 0.9.8k; and other products support MD2 with X.509 certificates, which might allow remote attackers to spoof certificates by using MD2 design flaws to generate a hash collision in less than brute-force time. NOTE: the scope of this issue is currently limited because the amount of computation required is still large. Published: 2009-07-30T19:00:00.000Z Updated: 2024-08-07T05:52:14.899Z Open on db.gcve.eu Reference links http://secunia.com/advisories/36139 http://secunia.com/advisories/36157 http://www.mandriva.com/security/advisories?name=MDVSA-2009:197 http://www.mandriva.com/security/advisories?name=MDVSA-2009:216 https://www.debian.org/security/2009/dsa-1888	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2009-1417`	vulnerable	2026-06-08 04:51:22.836363	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2008-1950`	vulnerable	2026-06-08 04:50:22.466803	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2008-1949`	vulnerable	2026-06-08 04:50:22.463496	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2008-1948`	vulnerable	2026-06-08 04:50:22.414756	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2006-7239`	vulnerable	2026-06-08 04:49:30.766566	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2006-4790`	vulnerable	2026-06-08 04:49:18.793876	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.