OSVDB ID: 47467

Title: GnuTLS lib/gnutls_handshake.c _gnutls_handshake_hash_buffers_clear Function Remote DoS

Info

Disclosure

Jun 30, 2008

Discovery

Unknown

Dates

Exploit

Unknown

Solution

Jun 30, 2008

Description

Classification

Location: Remote / Network Access
Attack Type: Denial of Service
Impact: Loss of Availability
Solution: Upgrade
Disclosure: Vendor Verified

Solution

Upgrade to version 2.4.1 or higher, as it has been reported to fix this vulnerability. In addition, Tomas Mraz has released a patch for some older versions.

Products

Unknown or Incomplete

References

CVE ID: 2008-2377 (see also: NVD)
Secunia Advisory ID: 31505
Other Advisory URL: http://article.gmane.org/gmane.comp.encryption.gpg.gnutls.devel/2947
http://www.nabble.com/Details-on-the-gnutls_handshake-local-crash-problem--GNUTLS-SA-2008-2--td18205022.html
Vendor Specific News/Changelog Entry: http://www.gnu.org/software/gnutls/security.html
https://issues.rpath.com/browse/RPL-2650

Credit

Unknown or Incomplete

Direct URL: http://osvdb.org/47467