GCVE - cpe:2.3:a:gnu:gnutls:1.3.4:*:*:*:*:*:*:*

Approved changes feed: RSS · Atom

cpe:2.3:a:gnu:gnutls:1.3.4:*:*:*:*:*:*:*

part: a version: 1.3.4 update: *

Vendor	Gnu (`575dd98a-a14a-5d9e-a2eb-97d38d86fcb9`)
Product	Gnutls (`955d43fd-13b7-57ed-9845-207af9eef570`)
Edition	*
Language	*
Software edition	*
Target software	*
Target hardware	*
Other	*
Notes	Imported from NVD CPE 2.0 feed

PURL mappings

PURL	Source	Last updated
`pkg:github/gnutls/gnutls`	purl2cpe	2026-06-01 10:11:55.743196
`pkg:gitlab/gnutls/gnutls`	purl2cpe	2026-06-01 10:11:55.743197
`pkg:gnu/gnutls`	purl2cpe	2026-06-01 10:11:55.743199
`pkg:rpm/fedora/gnutls`	purl2cpe	2026-06-01 10:11:55.743200
`pkg:rpm/opensuse/gnutls`	purl2cpe	2026-06-01 10:11:55.743202

Vulnerability references

Identifier	cpeApplicability	Submitted	db.gcve.eu details	Rationale
`CVE:CVE-2012-1663`	vulnerable	2026-06-08 05:00:50.228809	Details available Double free vulnerability in libgnutls in GnuTLS before 3.0.14 allows remote attackers to cause a denial of service (application crash) or possibly have unspecified other impact via a crafted certificate list. Published: 2012-03-13T22:00:00.000Z Updated: 2024-08-06T19:01:02.915Z Open on db.gcve.eu Reference links https://exchange.xforce.ibmcloud.com/vulnerabilities/74099 http://www.exploit-db.com/exploits/24865 http://article.gmane.org/gmane.comp.encryption.gpg.gnutls.devel/5866	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2012-1569`	vulnerable	2026-06-08 05:00:49.440352	Details available The asn1_get_length_der function in decoding.c in GNU Libtasn1 before 2.12, as used in GnuTLS before 3.0.16 and other products, does not properly handle certain large length values, which allows remote attackers to cause a denial of service (heap memory corruption and application crash) or possibly have unspecified other impact via a crafted ASN.1 structure. Published: 2012-03-26T19:00:00.000Z Updated: 2024-08-06T19:01:02.196Z Open on db.gcve.eu Reference links http://secunia.com/advisories/57260 http://rhn.redhat.com/errata/RHSA-2012-0427.html http://secunia.com/advisories/48578 http://rhn.redhat.com/errata/RHSA-2012-0531.html http://secunia.com/advisories/49002	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2009-2730`	vulnerable	2026-06-08 04:51:30.242614	Details available libgnutls in GnuTLS before 2.8.2 does not properly handle a '\0' character in a domain name in the subject's (1) Common Name (CN) or (2) Subject Alternative Name (SAN) field of an X.509 certificate, which allows man-in-the-middle attackers to spoof arbitrary SSL servers via a crafted certificate issued by a legitimate Certification Authority. Published: 2009-08-12T10:00:00.000Z Updated: 2024-08-07T05:59:57.016Z Open on db.gcve.eu Reference links https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A8409 http://www.securitytracker.com/id?1022777 http://www.vmware.com/security/advisories/VMSA-2009-0016.html http://www.openwall.com/lists/oss-security/2009/08/14/6 http://www.redhat.com/support/errata/RHSA-2009-1232.html	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2009-2409`	vulnerable	2026-06-08 04:51:28.268223	Details available The Network Security Services (NSS) library before 3.12.3, as used in Firefox; GnuTLS before 2.6.4 and 2.7.4; OpenSSL 0.9.8 through 0.9.8k; and other products support MD2 with X.509 certificates, which might allow remote attackers to spoof certificates by using MD2 design flaws to generate a hash collision in less than brute-force time. NOTE: the scope of this issue is currently limited because the amount of computation required is still large. Published: 2009-07-30T19:00:00.000Z Updated: 2024-08-07T05:52:14.899Z Open on db.gcve.eu Reference links http://secunia.com/advisories/36139 http://secunia.com/advisories/36157 http://www.mandriva.com/security/advisories?name=MDVSA-2009:197 http://www.mandriva.com/security/advisories?name=MDVSA-2009:216 https://www.debian.org/security/2009/dsa-1888	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2009-1417`	vulnerable	2026-06-08 04:51:22.850590	Details available gnutls-cli in GnuTLS before 2.6.6 does not verify the activation and expiration times of X.509 certificates, which allows remote attackers to successfully present a certificate that is (1) not yet valid or (2) no longer valid, related to lack of time checks in the _gnutls_x509_verify_certificate function in lib/x509/verify.c in libgnutls_x509, as used by (a) Exim, (b) OpenLDAP, and (c) libsoup. Published: 2009-04-30T20:00:00.000Z Updated: 2024-08-07T05:13:25.537Z Open on db.gcve.eu Reference links https://exchange.xforce.ibmcloud.com/vulnerabilities/50261 http://www.securitytracker.com/id?1022159 http://www.vupen.com/english/advisories/2009/1218 http://www.securityfocus.com/bid/34783 http://security.gentoo.org/glsa/glsa-200905-04.xml	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2008-1950`	vulnerable	2026-06-08 04:50:22.467261	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2008-1949`	vulnerable	2026-06-08 04:50:22.463957	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2008-1948`	vulnerable	2026-06-08 04:50:22.428643	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2006-7239`	vulnerable	2026-06-08 04:49:30.780934	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2006-4790`	vulnerable	2026-06-08 04:49:18.807475	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.