GCVE - cpe:2.3:a:gnu:gnutls:3.3.0:-:*:*:*:*:*:*

Approved changes feed: RSS · Atom

cpe:2.3:a:gnu:gnutls:3.3.0:-:*:*:*:*:*:*

part: a version: 3.3.0 update: -

Vendor	Gnu (`575dd98a-a14a-5d9e-a2eb-97d38d86fcb9`)
Product	Gnutls (`955d43fd-13b7-57ed-9845-207af9eef570`)
Edition	*
Language	*
Software edition	*
Target software	*
Target hardware	*
Other	*
Notes	Imported from NVD CPE 2.0 feed

PURL mappings

PURL	Source	Last updated
`pkg:github/gnutls/gnutls`	purl2cpe	2026-06-01 10:11:56.108079
`pkg:gitlab/gnutls/gnutls`	purl2cpe	2026-06-01 10:11:56.108080
`pkg:gnu/gnutls`	purl2cpe	2026-06-01 10:11:56.108081
`pkg:rpm/fedora/gnutls`	purl2cpe	2026-06-01 10:11:56.108083
`pkg:rpm/opensuse/gnutls`	purl2cpe	2026-06-01 10:11:56.108084

Vulnerability references

Identifier	cpeApplicability	Submitted	db.gcve.eu details	Rationale
`CVE:CVE-2015-6251`	vulnerable	2026-06-08 05:06:51.395731	Details available Double free vulnerability in GnuTLS before 3.3.17 and 3.4.x before 3.4.4 allows remote attackers to cause a denial of service via a long DistinguishedName (DN) entry in a certificate. Published: 2015-08-24T14:00:00.000Z Updated: 2024-08-06T07:15:13.264Z Open on db.gcve.eu Reference links https://bugzilla.redhat.com/show_bug.cgi?id=1251902 http://lists.opensuse.org/opensuse-updates/2015-09/msg00001.html http://www.securitytracker.com/id/1033226 http://www.gnutls.org/security.html#GNUTLS-SA-2015-3 http://www.openwall.com/lists/oss-security/2015/08/10/1	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2014-8564`	vulnerable	2026-06-08 05:06:09.377066	Details available The _gnutls_ecc_ansi_x963_export function in gnutls_ecc.c in GnuTLS 3.x before 3.1.28, 3.2.x before 3.2.20, and 3.3.x before 3.3.10 allows remote attackers to cause a denial of service (out-of-bounds write) via a crafted (1) Elliptic Curve Cryptography (ECC) certificate or (2) certificate signing requests (CSR), related to generating key IDs. Published: 2014-11-13T15:00:00.000Z Updated: 2024-08-06T13:18:48.419Z Open on db.gcve.eu Reference links http://secunia.com/advisories/59991 http://rhn.redhat.com/errata/RHSA-2014-1846.html http://www.ubuntu.com/usn/USN-2403-1 http://secunia.com/advisories/62294 https://bugzilla.redhat.com/show_bug.cgi?id=1161443	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2014-3466`	vulnerable	2026-06-08 05:05:32.766304	Details available Buffer overflow in the read_server_hello function in lib/gnutls_handshake.c in GnuTLS before 3.1.25, 3.2.x before 3.2.15, and 3.3.x before 3.3.4 allows remote servers to cause a denial of service (memory corruption) or possibly execute arbitrary code via a long session id in a ServerHello message. Published: 2014-06-03T14:00:00.000Z Updated: 2024-08-06T10:43:06.197Z Open on db.gcve.eu Reference links http://www.gnutls.org/security.html http://www-01.ibm.com/support/docview.wss?uid=swg21678776 http://www.debian.org/security/2014/dsa-2944 http://secunia.com/advisories/58340 http://rhn.redhat.com/errata/RHSA-2014-0595.html	Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.