CVE

Id
32494  
CVE No.
CVE-2008-2377  
Status
Candidate  
Description
Use-after-free vulnerability in the _gnutls_handshake_hash_buffers_clear function in lib/gnutls_handshake.c in libgnutls in GnuTLS 2.3.5 through 2.4.0 allows remote attackers to cause a denial of service (crash) or possibly execute arbitrary code via TLS transmission of data that is improperly used when the peer calls gnutls_handshake within a normal session, leading to attempted access to a deallocated libgcrypt handle.  
Phase
Assigned (20080521)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
351778 32494 CVE-2008-2377 MLIST:[gnutls-devel] 20080630 Details on the gnutls_handshake local crash problem [GNUTLS-SA-2008-2]  View
351779 32494 CVE-2008-2377 URL:http://www.nabble.com/Details-on-the-gnutls_handshake-local-crash-problem--GNUTLS-SA-2008-2--td18205022.html  View
351780 32494 CVE-2008-2377 MLIST:[gnutls-devel] 20080630 GnuTLS 2.4.1  View
351781 32494 CVE-2008-2377 URL:http://article.gmane.org/gmane.comp.encryption.gpg.gnutls.devel/2947  View
351782 32494 CVE-2008-2377 CONFIRM:http://www.gnu.org/software/gnutls/security.html  View
351783 32494 CVE-2008-2377 CONFIRM:https://issues.rpath.com/browse/RPL-2650  View
351784 32494 CVE-2008-2377 BID:30713  View
351785 32494 CVE-2008-2377 URL:http://www.securityfocus.com/bid/30713  View
351786 32494 CVE-2008-2377 VUPEN:ADV-2008-2398  View
351787 32494 CVE-2008-2377 URL:http://www.vupen.com/english/advisories/2008/2398  View
351788 32494 CVE-2008-2377 SECUNIA:31505  View
351789 32494 CVE-2008-2377 URL:http://secunia.com/advisories/31505  View
351790 32494 CVE-2008-2377 XF:gnutls-gnutlshandshake-code-execution(44486)  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
41714 JVNDB-2009-002721 GForge の common/include/GroupJoinRequest.class における SQL インジェクションの脆弱性 GForge の common/include/GroupJoinRequest.class の create 関数には、SQL インジェクションの脆弱性が存在します。 CVE-2008-2381 32494 7.5 http://jvndb.jvn.jp/ja/contents/2009/JVNDB-2009-002721.html  View