Most recent entries from all https://vulnerability.circl.lu Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Sun, 11 Oct 2026 08:02:09 +0000 CVE-2024-28835 — Gnutls: potential crash during chain building/verification https://vulnerability.circl.lu/vuln/cve-2024-28835 <p><strong>Affected:</strong> gnutls, Red Hat Enterprise Linux 9, Red Hat Enterprise Linux 9.2 Extended Update Support, Red Hat Enterprise Linux 10, Red Hat Enterprise Linux 6, Red Hat Enterprise Linux 7, Red Hat Enterprise Linux 8</p> <p>A flaw has been discovered in GnuTLS where an application crash can be induced when attempting to verify a specially crafted .pem bundle using the &#34;certtool --verify-chain&#34; command.</p> <p><strong>Affected:</strong> gnutls, Red Hat Enterprise Linux 9, Red Hat Enterprise Linux 9.2 Extended Update Support, Red Hat Enterprise Linux 10, Red Hat Enterprise Linux 6, Red Hat Enterprise Linux 7, Red Hat Enterprise Linux 8</p> <p>A flaw has been discovered in GnuTLS where an application crash can be induced when attempting to verify a specially crafted .pem bundle using the &#34;certtool --verify-chain&#34; command.</p> https://vulnerability.circl.lu/vuln/cve-2024-28835 USN-6733-1 — gnutls28 vulnerabilities https://vulnerability.circl.lu/vuln/usn-6733-1 <p><strong>Affected:</strong> Ubuntu:20.04:LTS: gnutls28, Ubuntu:22.04:LTS: gnutls28</p> <p>It was discovered that GnuTLS had a timing side-channel when performing certain ECDSA operations. A remote attacker could possibly use this issue to recover sensitive information. (CVE-2024-28834)</p> <p>It was discovered that GnuTLS incorrectly handled verifying certain PEM bundles. A remote attacker could possibly use this issue to cause GnuTLS to crash, resulting in a denial of service. This issue only affected Ubuntu 22.04 LTS and Ubuntu 23.10. (CVE-2024-28835)</p> <p><strong>Affected:</strong> Ubuntu:20.04:LTS: gnutls28, Ubuntu:22.04:LTS: gnutls28</p> <p>It was discovered that GnuTLS had a timing side-channel when performing certain ECDSA operations. A remote attacker could possibly use this issue to recover sensitive information. (CVE-2024-28834)</p> <p>It was discovered that GnuTLS incorrectly handled verifying certain PEM bundles. A remote attacker could possibly use this issue to cause GnuTLS to crash, resulting in a denial of service. This issue only affected Ubuntu 22.04 LTS and Ubuntu 23.10. (CVE-2024-28835)</p> https://vulnerability.circl.lu/vuln/usn-6733-1