NVD

Id
1886  
Name
CVE-2008-1950  
Description
Integer signedness error in the _gnutls_ciphertext2compressed function in lib/gnutls_cipher.c in libgnutls in GnuTLS before 2.2.4 allows remote attackers to cause a denial of service (buffer over-read and crash) via a certain integer value in the Random field in an encrypted Client Hello message within a TLS record with an invalid Record Length, which leads to an invalid cipher padding length, aka GNUTLS-SA-2008-1-3.  
Reject
 
CVSS Version
2  
CVSS Score
5  
Severity
Medium  
CVSS Base Score
5  
CVSS Impact Subscore
2.9  
CVSS Exploit Subscore
10  
CVSS Vector
(AV:N/AC:L/Au:N/C:N/I:N/A:P)  
Pub Date
2017-01-03  
Published
2008-05-21  
Modified Date
2011-03-07  
Seq
2008-1950  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
12255 1886 CVE-2008-1950 http://git.savannah.gnu.org/gitweb/?p=gnutls.git;a=commitdiff;h=bc8102405fda11ea00ca3b42acc4f4bce9d6e97b  View
12256 1886 CVE-2008-1950 [gnutls-devel] 20080519 GnuTLS 2.2.4 - Security release [GNUTLS-SA-2008-1]  View
12257 1886 CVE-2008-1950 [gnutls-devel] 20080519 Re: GnuTLS 2.2.4 - Security release [GNUTLS-SA-2008-1]  View
12258 1886 CVE-2008-1950 [gnutls-devel] 20080519 GnuTLS 2.2.5 - Brown paper bag release  View
12259 1886 CVE-2008-1950 SUSE-SA:2008:046  View
12260 1886 CVE-2008-1950 oval:org.mitre.oval:def:11393  View
12261 1886 CVE-2008-1950 GLSA-200805-20  View
12262 1886 CVE-2008-1950 3902  View
12263 1886 CVE-2008-1950 http://sourceforge.net/project/shownotes.php?release_id=600646&group_id=21558  View
12264 1886 CVE-2008-1950 http://wiki.rpath.com/wiki/Advisories:rPSA-2008-0174  View
12265 1886 CVE-2008-1950 http://www.cert.fi/haavoittuvuudet/advisory-gnutls.html  View
12266 1886 CVE-2008-1950 DSA-1581  View
12267 1886 CVE-2008-1950 VU#659209  View
12268 1886 CVE-2008-1950 MDVSA-2008:106  View
12269 1886 CVE-2008-1950 [oss-security] 20080520 Re: CVE ID request: GNUTLS  View
12270 1886 CVE-2008-1950 [oss-security] 20080520 Re: CVE ID request: GNUTLS  View
12271 1886 CVE-2008-1950 [oss-security] 20080520 Re: CVE ID request: GNUTLS  View
12272 1886 CVE-2008-1950 RHSA-2008:0489  View
12273 1886 CVE-2008-1950 RHSA-2008:0492  View
12274 1886 CVE-2008-1950 20080520 Vulnerability Advisory on GnuTLS  View
12275 1886 CVE-2008-1950 20080522 rPSA-2008-0174-1 gnutls  View
12276 1886 CVE-2008-1950 29292  View
12277 1886 CVE-2008-1950 1020059  View
12278 1886 CVE-2008-1950 USN-613-1  View
12279 1886 CVE-2008-1950 ADV-2008-1582  View
12280 1886 CVE-2008-1950 ADV-2008-1583  View
12281 1886 CVE-2008-1950 gnutls-gnutlsciphertext2compressed-bo(42533)  View
12282 1886 CVE-2008-1950 https://issues.rpath.com/browse/RPL-2552  View
12283 1886 CVE-2008-1950 FEDORA-2008-4183  View
12284 1886 CVE-2008-1950 FEDORA-2008-4259  View
12285 1886 CVE-2008-1950 FEDORA-2008-4274  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
46062 JVNDB-2008-001372 GnuTLS の _gnutls_ciphertext2compressed 関数におけるサービス運用妨害 (DoS) の脆弱性 GnuTLS libgnutls の _gnutls_ciphertext2compressed 関数には、不正な Record Length を持つ TLS レコード中の暗号化された Client Hello メッセージの Random フィールド内の特定の整数値の処理に問題があるため、サービス運用妨害 (DoS) 状態となる脆弱性が存在します。 CVE-2008-1950 32063 CVE-2008-1950 1886 5 http://jvndb.jvn.jp/ja/contents/2008/JVNDB-2008-001372.html 2008-05-19 2008-08-08 View