MEDIUM
gnutls: insufficient session id length check in _gnutls_read_server_hello (GNUTLS-SA-2014-3)
Published Jun 3, 2014
6.8
MEDIUMCVSS 2.0
EPSS 11.22%
Description
Buffer overflow in the read_server_hello function in lib/gnutls_handshake.c in GnuTLS before 3.1.25, 3.2.x before 3.2.15, and 3.3.x before 3.3.4 allows remote servers to cause a denial of service (memory corruption) or possibly execute arbitrary code via a long session id in a ServerHello message.
Affected products
No data.
Configuration 1
Configuration 2
OR
- ≤ 3.1.24
- 3.1.0
- 3.1.1
- 3.1.2
- 3.1.3
- 3.1.4
- 3.1.5
- 3.1.6
- 3.1.7
- 3.1.8
- 3.1.9
- 3.1.10
- 3.1.11
- 3.1.12
- 3.1.13
- 3.1.14
- 3.1.15
- 3.1.16
- 3.1.17
- 3.1.18
- 3.1.19
- 3.1.20
- 3.1.21
- 3.1.22
- 3.1.23
Configuration 3
OR
- 3.2.0
- 3.2.1
- 3.2.2
- 3.2.3
- 3.2.4
- 3.2.5
- 3.2.6
- 3.2.7
- 3.2.8
- 3.2.8.1
- 3.2.9
- 3.2.10
- 3.2.11
- 3.2.12
- 3.2.12.1
- 3.2.13
- 3.2.14
No data.
RHEV 3.X Hypervisor and Agents for RHEL-6
rhev-hypervisor6-0:6.5-20140624.0.el6ev
Fixed · RHSA-2014:0815
Red Hat Enterprise Linux 5
gnutls-0:1.4.1-16.el5_10
Fixed · RHSA-2014:0594
Red Hat Enterprise Linux 6
gnutls-0:2.8.5-14.el6_5
Fixed · RHSA-2014:0595
Red Hat Enterprise Linux 7
gnutls-0:3.1.18-9.el7_0
Fixed · RHSA-2014:0684
Red Hat Enterprise Linux 4
gnutls
Will not fix
Red Hat Enterprise Linux 6
mingw32-gnutls
Will not fix
| Product | Package | State | Advisory |
|---|---|---|---|
| RHEV 3.X Hypervisor and Agents for RHEL-6 | rhev-hypervisor6-0:6.5-20140624.0.el6ev | Fixed | RHSA-2014:0815 |
| Red Hat Enterprise Linux 5 | gnutls-0:1.4.1-16.el5_10 | Fixed | RHSA-2014:0594 |
| Red Hat Enterprise Linux 6 | gnutls-0:2.8.5-14.el6_5 | Fixed | RHSA-2014:0595 |
| Red Hat Enterprise Linux 7 | gnutls-0:3.1.18-9.el7_0 | Fixed | RHSA-2014:0684 |
| Red Hat Enterprise Linux 4 | gnutls | Will not fix | n/a |
| Red Hat Enterprise Linux 6 | mingw32-gnutls | Will not fix | n/a |
No package ranges for this CVE.
Remediation
No remediation recorded yet.
Weaknesses (2)
References (36)
- http://linux.oracle.com/errata/ELSA-2014-0594.html x_refsource_CONFIRM
- http://linux.oracle.com/errata/ELSA-2014-0595.html x_refsource_CONFIRM
- http://lists.opensuse.org/opensuse-security-announce/2014-06/msg00002.html vendor-advisoryx_refsource_SUSE
- http://lists.opensuse.org/opensuse-security-announce/2014-06/msg00007.html vendor-advisoryx_refsource_SUSE
- http://lists.opensuse.org/opensuse-security-announce/2014-06/msg00010.html vendor-advisoryx_refsource_SUSE
- http://lists.opensuse.org/opensuse-security-announce/2014-06/msg00015.html vendor-advisoryx_refsource_SUSE
- http://radare.today/technical-analysis-of-the-gnutls-hello-vulnerability/ x_refsource_MISCExploitURL Repurposed
- http://rhn.redhat.com/errata/RHSA-2014-0594.html vendor-advisoryx_refsource_REDHAT
- http://rhn.redhat.com/errata/RHSA-2014-0595.html vendor-advisoryx_refsource_REDHAT
- http://rhn.redhat.com/errata/RHSA-2014-0684.html vendor-advisoryx_refsource_REDHAT
- http://rhn.redhat.com/errata/RHSA-2014-0815.html vendor-advisoryx_refsource_REDHAT
- http://secunia.com/advisories/58340 third-party-advisoryx_refsource_SECUNIA
- http://secunia.com/advisories/58598 third-party-advisoryx_refsource_SECUNIA
- http://secunia.com/advisories/58601 third-party-advisoryx_refsource_SECUNIA
- http://secunia.com/advisories/58642 third-party-advisoryx_refsource_SECUNIA
- http://secunia.com/advisories/59016 third-party-advisoryx_refsource_SECUNIA
- http://secunia.com/advisories/59021 third-party-advisoryx_refsource_SECUNIA
- http://secunia.com/advisories/59057 third-party-advisoryx_refsource_SECUNIA
- http://secunia.com/advisories/59086 third-party-advisoryx_refsource_SECUNIA
- http://secunia.com/advisories/59408 third-party-advisoryx_refsource_SECUNIA
- http://secunia.com/advisories/59838 third-party-advisoryx_refsource_SECUNIA
- http://secunia.com/advisories/60384 third-party-advisoryx_refsource_SECUNIA
- http://www-01.ibm.com/support/docview.wss?uid=swg21678776 x_refsource_CONFIRM
- http://www-947.ibm.com/support/entry/portal/docdisplay?lndocid=MIGR-5096155 x_refsource_CONFIRM
- http://www.debian.org/security/2014/dsa-2944 vendor-advisoryx_refsource_DEBIAN
- http://www.gnutls.org/security.html x_refsource_CONFIRMVendor Advisory
- http://www.novell.com/support/kb/doc.php?id=7015302 x_refsource_CONFIRM
- http://www.novell.com/support/kb/doc.php?id=7015303 x_refsource_CONFIRM
- http://www.securityfocus.com/bid/67741 vdb-entryx_refsource_BID
- http://www.securitytracker.com/id/1030314 vdb-entryx_refsource_SECTRACK
- http://www.ubuntu.com/usn/USN-2229-1 vendor-advisoryx_refsource_UBUNTU
- https://access.redhat.com/security/cve/CVE-2014-3466 Vendor Advisory
- https://bugzilla.redhat.com/show_bug.cgi?id=1101932 x_refsource_CONFIRMIssue Tracking
- https://nvd.nist.gov/vuln/detail/CVE-2014-3466
- https://www.cve.org/CVERecord?id=CVE-2014-3466
- https://www.gitorious.org/gnutls/gnutls/commit/688ea6428a432c39203d00acd1af0e7684e5ddfd x_refsource_CONFIRMExploitPatch
Change history (0)
No recorded changes yet.
Sources
CVE.org / MITRE
Status PUBLISHED
Assigner redhat
Published Jun 3, 2014
Updated Aug 6, 2024
Reserved May 14, 2014
Link CVE-2014-3466
CISA Vulnrichment
Updated n/a