NVD

Id
10645  
Name
CVE-2011-4128  
Description
Buffer overflow in the gnutls_session_get_data function in lib/gnutls_session.c in GnuTLS 2.12.x before 2.12.14 and 3.x before 3.0.7, when used on a client that performs nonstandard session resumption, allows remote TLS servers to cause a denial of service (application crash) via a large SessionTicket.  
Reject
 
CVSS Version
2  
CVSS Score
4.3  
Severity
Medium  
CVSS Base Score
4.3  
CVSS Impact Subscore
2.9  
CVSS Exploit Subscore
8.6  
CVSS Vector
(AV:N/AC:M/Au:N/C:N/I:N/A:P)  
Pub Date
2017-01-07  
Published
2011-12-08  
Modified Date
2013-05-03  
Seq
2011-4128  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
60200 10645 CVE-2011-4128 [gnutls-devel] 20111108 Possible buffer overflow on gnutls_session_get_data  View
60201 10645 CVE-2011-4128 http://git.savannah.gnu.org/gitweb/?p=gnutls.git;a=commitdiff;h=190cef6eed37d0e73a73c1e205eb31d45ab60a3c  View
60202 10645 CVE-2011-4128 http://git.savannah.gnu.org/gitweb/?p=gnutls.git;a=commitdiff;h=e82ef4545e9e98cbcb032f55d7c750b81e3a0450  View
60203 10645 CVE-2011-4128 [oss-security] 20111108 CVE request: gnutls possible DoS (GNUTLS-SA-2011-2)  View
60204 10645 CVE-2011-4128 [oss-security] 20111109 Re: CVE request: gnutls possible DoS (GNUTLS-SA-2011-2)  View
60205 10645 CVE-2011-4128 RHSA-2012:0429  View
60206 10645 CVE-2011-4128 RHSA-2012:0488  View
60207 10645 CVE-2011-4128 RHSA-2012:0531  View
60208 10645 CVE-2011-4128 http://www.gnu.org/software/gnutls/security.html  View
60209 10645 CVE-2011-4128 USN-1418-1  View
60210 10645 CVE-2011-4128 https://bugzilla.redhat.com/show_bug.cgi?id=752308  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
33083 JVNDB-2011-003323 GnuTLS の gnutls_session_get_data 関数におけるバッファオーバーフローの脆弱性 GnuTLS の lib/gnutls_session.c 内にある gnutls_session_get_data 関数には、規定外のセッション再開を実行するクライアントにおいて利用される場合に、バッファオーバーフローの脆弱性が存在します。 CVE-2011-4128 52035 CVE-2011-4128 10645 4.3 http://jvndb.jvn.jp/ja/contents/2011/JVNDB-2011-003323.html 2011-11-08 2012-12-17 View