GnuTLS 'common. c' dual-release Denial of Service Vulnerability

GnuTLS 'common. c' dual-release Denial of Service Vulnerability
GnuTLS 'common. c' dual-release Denial of Service Vulnerability

Release date:
Updated on:

Affected Systems:

GnuTLS 3.x
GnuTLS 2.x
GnuTLS

Description:

Bugtraq id: 76267

GnuTLS is an open-source implementation of SSL, TLS, and DTLS. It uses APIs, X.509, PKCS #12, OpenPGP, and other security data types for network communication encryption.

GnuTLS has a denial-of-service vulnerability in the 'common. c' implementation. Attackers can exploit this vulnerability to launch a Denial-of-Service attack.

<* Source: Kurt Roeckx (kurt@roeckx.be)
*>

Suggestion:

Vendor patch:

GnuTLS
------
The vendor has released a patch to fix this security problem. Please download it from the vendor's homepage:

Http://gnutls.org

This article permanently updates the link address: