NVD

Id
31655  
Name
CVE-2014-3466  
Description
Buffer overflow in the read_server_hello function in lib/gnutls_handshake.c in GnuTLS before 3.1.25, 3.2.x before 3.2.15, and 3.3.x before 3.3.4 allows remote servers to cause a denial of service (memory corruption) or possibly execute arbitrary code via a long session id in a ServerHello message.  
Reject
 
CVSS Version
2  
CVSS Score
6.8  
Severity
Medium  
CVSS Base Score
6.8  
CVSS Impact Subscore
6.4  
CVSS Exploit Subscore
8.6  
CVSS Vector
(AV:N/AC:M/Au:N/C:P/I:P/A:P)  
Pub Date
2017-01-19  
Published
2014-06-03  
Modified Date
2017-01-06  
Seq
2014-3466  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
165742 31655 CVE-2014-3466 http://linux.oracle.com/errata/ELSA-2014-0594.html  View
165743 31655 CVE-2014-3466 http://linux.oracle.com/errata/ELSA-2014-0595.html  View
165744 31655 CVE-2014-3466 openSUSE-SU-2014:0763  View
165745 31655 CVE-2014-3466 openSUSE-SU-2014:0767  View
165746 31655 CVE-2014-3466 http://radare.today/technical-analysis-of-the-gnutls-hello-vulnerability/  View
165747 31655 CVE-2014-3466 RHSA-2014:0594  View
165748 31655 CVE-2014-3466 RHSA-2014:0815  View
165749 31655 CVE-2014-3466 59408  View
165750 31655 CVE-2014-3466 60384  View
165751 31655 CVE-2014-3466 http://www-01.ibm.com/support/docview.wss?uid=swg21678776  View
165752 31655 CVE-2014-3466 http://www-947.ibm.com/support/entry/portal/docdisplay?lndocid=MIGR-5096155  View
165753 31655 CVE-2014-3466 DSA-2944  View
165754 31655 CVE-2014-3466 http://www.gnutls.org/security.html  View
165755 31655 CVE-2014-3466 http://www.novell.com/support/kb/doc.php?id=7015302  View
165756 31655 CVE-2014-3466 http://www.novell.com/support/kb/doc.php?id=7015303  View
165757 31655 CVE-2014-3466 67741  View
165758 31655 CVE-2014-3466 1030314  View
165759 31655 CVE-2014-3466 https://bugzilla.redhat.com/show_bug.cgi?id=1101932  View
165760 31655 CVE-2014-3466 https://www.gitorious.org/gnutls/gnutls/commit/688ea6428a432c39203d00acd1af0e7684e5ddfd  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
13859 JVNDB-2014-002734 GnuTLS の lib/gnutls_handshake.c の read_server_hello 関数におけるバッファオーバーフローの脆弱性 GnuTLS の lib/gnutls_handshake.c の read_server_hello 関数には、バッファオーバーフローの脆弱性が存在します。 CVE-2014-3466 70754 CVE-2014-3466 31655 6.8 http://jvndb.jvn.jp/ja/contents/2014/JVNDB-2014-002734.html 2014-05-29 2014-08-26 View