NVD

Id
1885  
Name
CVE-2008-1949  
Description
The _gnutls_recv_client_kx_message function in lib/gnutls_kx.c in libgnutls in gnutls-serv in GnuTLS before 2.2.4 continues to process Client Hello messages within a TLS message after one has already been processed, which allows remote attackers to cause a denial of service (NULL dereference and crash) via a TLS message containing multiple Client Hello messages, aka GNUTLS-SA-2008-1-2.  
Reject
 
CVSS Version
2  
CVSS Score
9.3  
Severity
High  
CVSS Base Score
9.3  
CVSS Impact Subscore
10  
CVSS Exploit Subscore
8.6  
CVSS Vector
(AV:N/AC:M/Au:N/C:C/I:C/A:C)  
Pub Date
2017-01-03  
Published
2008-05-21  
Modified Date
2011-03-07  
Seq
2008-1949  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
12224 1885 CVE-2008-1949 http://git.savannah.gnu.org/gitweb/?p=gnutls.git;a=commitdiff;h=bc8102405fda11ea00ca3b42acc4f4bce9d6e97b  View
12225 1885 CVE-2008-1949 [gnutls-devel] 20080519 GnuTLS 2.2.4 - Security release [GNUTLS-SA-2008-1]  View
12226 1885 CVE-2008-1949 [gnutls-devel] 20080519 Re: GnuTLS 2.2.4 - Security release [GNUTLS-SA-2008-1]  View
12227 1885 CVE-2008-1949 [gnutls-devel] 20080519 GnuTLS 2.2.5 - Brown paper bag release  View
12228 1885 CVE-2008-1949 SUSE-SA:2008:046  View
12229 1885 CVE-2008-1949 oval:org.mitre.oval:def:9519  View
12230 1885 CVE-2008-1949 GLSA-200805-20  View
12231 1885 CVE-2008-1949 3902  View
12232 1885 CVE-2008-1949 http://sourceforge.net/project/shownotes.php?release_id=600646&group_id=21558  View
12233 1885 CVE-2008-1949 http://wiki.rpath.com/wiki/Advisories:rPSA-2008-0174  View
12234 1885 CVE-2008-1949 http://www.cert.fi/haavoittuvuudet/advisory-gnutls.html  View
12235 1885 CVE-2008-1949 DSA-1581  View
12236 1885 CVE-2008-1949 VU#252626  View
12237 1885 CVE-2008-1949 MDVSA-2008:106  View
12238 1885 CVE-2008-1949 [oss-security] 20080520 Re: CVE ID request: GNUTLS  View
12239 1885 CVE-2008-1949 [oss-security] 20080520 Re: CVE ID request: GNUTLS  View
12240 1885 CVE-2008-1949 [oss-security] 20080520 Re: CVE ID request: GNUTLS  View
12241 1885 CVE-2008-1949 RHSA-2008:0489  View
12242 1885 CVE-2008-1949 RHSA-2008:0492  View
12243 1885 CVE-2008-1949 20080520 Vulnerability Advisory on GnuTLS  View
12244 1885 CVE-2008-1949 20080522 rPSA-2008-0174-1 gnutls  View
12245 1885 CVE-2008-1949 29292  View
12246 1885 CVE-2008-1949 1020058  View
12247 1885 CVE-2008-1949 USN-613-1  View
12248 1885 CVE-2008-1949 ADV-2008-1582  View
12249 1885 CVE-2008-1949 ADV-2008-1583  View
12250 1885 CVE-2008-1949 gnutls-gnutlsrecvclientkxmessage-bo(42530)  View
12251 1885 CVE-2008-1949 https://issues.rpath.com/browse/RPL-2552  View
12252 1885 CVE-2008-1949 FEDORA-2008-4183  View
12253 1885 CVE-2008-1949 FEDORA-2008-4259  View
12254 1885 CVE-2008-1949 FEDORA-2008-4274  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
46063 JVNDB-2008-001373 GnuTLS の _gnutls_recv_client_kx_message 関数 におけるサービス運用妨害 (DoS) の脆弱性 GnuTLS gnutls-serv の _gnutls_recv_client_kx_message 関数には、既に処理した TLS メッセージを処理し続ける問題があり、サービス運用妨害 (DoS) 状態となる脆弱性が存在します。 CVE-2008-1949 32062 CVE-2008-1949 1885 6.8 http://jvndb.jvn.jp/ja/contents/2008/JVNDB-2008-001373.html 2008-05-19 2008-08-08 View