CVE-2014-8564

The _gnutls_ecc_ansi_x963_export function in gnutls_ecc.c in GnuTLS 3.x before 3.1.28, 3.2.x before 3.2.20, and 3.3.x before 3.3.10 allows remote attackers to cause a denial of service (out-of-bounds write) via a crafted (1) Elliptic Curve Cryptography (ECC) certificate or (2) certificate signing requests (CSR), related to generating key IDs.
Configurations

Configuration 1 (hide)

OR cpe:2.3:a:gnu:gnutls:3.0:*:*:*:*:*:*:*
cpe:2.3:a:gnu:gnutls:3.0.0:*:*:*:*:*:*:*
cpe:2.3:a:gnu:gnutls:3.0.1:*:*:*:*:*:*:*
cpe:2.3:a:gnu:gnutls:3.0.2:*:*:*:*:*:*:*
cpe:2.3:a:gnu:gnutls:3.0.3:*:*:*:*:*:*:*
cpe:2.3:a:gnu:gnutls:3.0.4:*:*:*:*:*:*:*
cpe:2.3:a:gnu:gnutls:3.0.5:*:*:*:*:*:*:*
cpe:2.3:a:gnu:gnutls:3.0.6:*:*:*:*:*:*:*
cpe:2.3:a:gnu:gnutls:3.0.7:*:*:*:*:*:*:*
cpe:2.3:a:gnu:gnutls:3.0.8:*:*:*:*:*:*:*
cpe:2.3:a:gnu:gnutls:3.0.9:*:*:*:*:*:*:*
cpe:2.3:a:gnu:gnutls:3.0.10:*:*:*:*:*:*:*
cpe:2.3:a:gnu:gnutls:3.0.11:*:*:*:*:*:*:*
cpe:2.3:a:gnu:gnutls:3.0.12:*:*:*:*:*:*:*
cpe:2.3:a:gnu:gnutls:3.0.13:*:*:*:*:*:*:*
cpe:2.3:a:gnu:gnutls:3.0.14:*:*:*:*:*:*:*
cpe:2.3:a:gnu:gnutls:3.0.15:*:*:*:*:*:*:*
cpe:2.3:a:gnu:gnutls:3.0.16:*:*:*:*:*:*:*
cpe:2.3:a:gnu:gnutls:3.0.17:*:*:*:*:*:*:*
cpe:2.3:a:gnu:gnutls:3.0.18:*:*:*:*:*:*:*
cpe:2.3:a:gnu:gnutls:3.0.19:*:*:*:*:*:*:*
cpe:2.3:a:gnu:gnutls:3.0.20:*:*:*:*:*:*:*
cpe:2.3:a:gnu:gnutls:3.0.21:*:*:*:*:*:*:*
cpe:2.3:a:gnu:gnutls:3.0.22:*:*:*:*:*:*:*
cpe:2.3:a:gnu:gnutls:3.0.23:*:*:*:*:*:*:*
cpe:2.3:a:gnu:gnutls:3.0.24:*:*:*:*:*:*:*
cpe:2.3:a:gnu:gnutls:3.0.25:*:*:*:*:*:*:*
cpe:2.3:a:gnu:gnutls:3.0.26:*:*:*:*:*:*:*
cpe:2.3:a:gnu:gnutls:3.0.27:*:*:*:*:*:*:*
cpe:2.3:a:gnu:gnutls:3.0.28:*:*:*:*:*:*:*
cpe:2.3:a:gnu:gnutls:3.1.0:*:*:*:*:*:*:*
cpe:2.3:a:gnu:gnutls:3.1.1:*:*:*:*:*:*:*
cpe:2.3:a:gnu:gnutls:3.1.2:*:*:*:*:*:*:*
cpe:2.3:a:gnu:gnutls:3.1.3:*:*:*:*:*:*:*
cpe:2.3:a:gnu:gnutls:3.1.4:*:*:*:*:*:*:*
cpe:2.3:a:gnu:gnutls:3.1.5:*:*:*:*:*:*:*
cpe:2.3:a:gnu:gnutls:3.1.6:*:*:*:*:*:*:*
cpe:2.3:a:gnu:gnutls:3.1.7:*:*:*:*:*:*:*
cpe:2.3:a:gnu:gnutls:3.1.8:*:*:*:*:*:*:*
cpe:2.3:a:gnu:gnutls:3.1.9:*:*:*:*:*:*:*
cpe:2.3:a:gnu:gnutls:3.1.10:*:*:*:*:*:*:*
cpe:2.3:a:gnu:gnutls:3.1.11:*:*:*:*:*:*:*
cpe:2.3:a:gnu:gnutls:3.1.12:*:*:*:*:*:*:*
cpe:2.3:a:gnu:gnutls:3.1.13:*:*:*:*:*:*:*
cpe:2.3:a:gnu:gnutls:3.1.14:*:*:*:*:*:*:*
cpe:2.3:a:gnu:gnutls:3.1.15:*:*:*:*:*:*:*
cpe:2.3:a:gnu:gnutls:3.1.16:*:*:*:*:*:*:*
cpe:2.3:a:gnu:gnutls:3.1.17:*:*:*:*:*:*:*
cpe:2.3:a:gnu:gnutls:3.1.18:*:*:*:*:*:*:*
cpe:2.3:a:gnu:gnutls:3.1.19:*:*:*:*:*:*:*
cpe:2.3:a:gnu:gnutls:3.1.20:*:*:*:*:*:*:*
cpe:2.3:a:gnu:gnutls:3.1.21:*:*:*:*:*:*:*
cpe:2.3:a:gnu:gnutls:3.1.22:*:*:*:*:*:*:*
cpe:2.3:a:gnu:gnutls:3.1.23:*:*:*:*:*:*:*
cpe:2.3:a:gnu:gnutls:3.1.24:*:*:*:*:*:*:*
cpe:2.3:a:gnu:gnutls:3.1.25:*:*:*:*:*:*:*
cpe:2.3:a:gnu:gnutls:3.1.26:*:*:*:*:*:*:*
cpe:2.3:a:gnu:gnutls:3.1.27:*:*:*:*:*:*:*
cpe:2.3:a:gnu:gnutls:3.2.0:*:*:*:*:*:*:*
cpe:2.3:a:gnu:gnutls:3.2.1:*:*:*:*:*:*:*
cpe:2.3:a:gnu:gnutls:3.2.2:*:*:*:*:*:*:*
cpe:2.3:a:gnu:gnutls:3.2.3:*:*:*:*:*:*:*
cpe:2.3:a:gnu:gnutls:3.2.4:*:*:*:*:*:*:*
cpe:2.3:a:gnu:gnutls:3.2.5:*:*:*:*:*:*:*
cpe:2.3:a:gnu:gnutls:3.2.6:*:*:*:*:*:*:*
cpe:2.3:a:gnu:gnutls:3.2.7:*:*:*:*:*:*:*
cpe:2.3:a:gnu:gnutls:3.2.8:*:*:*:*:*:*:*
cpe:2.3:a:gnu:gnutls:3.2.8.1:*:*:*:*:*:*:*
cpe:2.3:a:gnu:gnutls:3.2.9:*:*:*:*:*:*:*
cpe:2.3:a:gnu:gnutls:3.2.10:*:*:*:*:*:*:*
cpe:2.3:a:gnu:gnutls:3.2.11:*:*:*:*:*:*:*
cpe:2.3:a:gnu:gnutls:3.2.12:*:*:*:*:*:*:*
cpe:2.3:a:gnu:gnutls:3.2.12.1:*:*:*:*:*:*:*
cpe:2.3:a:gnu:gnutls:3.2.13:*:*:*:*:*:*:*
cpe:2.3:a:gnu:gnutls:3.2.14:*:*:*:*:*:*:*
cpe:2.3:a:gnu:gnutls:3.2.15:*:*:*:*:*:*:*
cpe:2.3:a:gnu:gnutls:3.2.16:*:*:*:*:*:*:*
cpe:2.3:a:gnu:gnutls:3.2.17:*:*:*:*:*:*:*
cpe:2.3:a:gnu:gnutls:3.2.18:*:*:*:*:*:*:*
cpe:2.3:a:gnu:gnutls:3.2.19:*:*:*:*:*:*:*
cpe:2.3:a:gnu:gnutls:3.3.0:-:*:*:*:*:*:*
cpe:2.3:a:gnu:gnutls:3.3.0:pre0:*:*:*:*:*:*
cpe:2.3:a:gnu:gnutls:3.3.1:*:*:*:*:*:*:*
cpe:2.3:a:gnu:gnutls:3.3.2:*:*:*:*:*:*:*
cpe:2.3:a:gnu:gnutls:3.3.3:*:*:*:*:*:*:*
cpe:2.3:a:gnu:gnutls:3.3.4:*:*:*:*:*:*:*
cpe:2.3:a:gnu:gnutls:3.3.5:*:*:*:*:*:*:*
cpe:2.3:a:gnu:gnutls:3.3.6:*:*:*:*:*:*:*
cpe:2.3:a:gnu:gnutls:3.3.7:*:*:*:*:*:*:*
cpe:2.3:a:gnu:gnutls:3.3.8:*:*:*:*:*:*:*
cpe:2.3:a:gnu:gnutls:3.3.9:*:*:*:*:*:*:*

Configuration 2 (hide)

OR cpe:2.3:o:redhat:enterprise_linux_desktop:7.0:*:*:*:*:*:*:*
cpe:2.3:o:redhat:enterprise_linux_hpc_node:7.0:*:*:*:*:*:*:*
cpe:2.3:o:redhat:enterprise_linux_server:7.0:*:*:*:*:*:*:*
cpe:2.3:o:redhat:enterprise_linux_workstation:7.0:*:*:*:*:*:*:*

Configuration 3 (hide)

OR cpe:2.3:o:opensuse:opensuse:12.3:*:*:*:*:*:*:*
cpe:2.3:o:opensuse:opensuse:13.1:*:*:*:*:*:*:*
cpe:2.3:o:opensuse:opensuse:13.2:*:*:*:*:*:*:*

Configuration 4 (hide)

cpe:2.3:o:canonical:ubuntu_linux:14.10:*:*:*:*:*:*:*

History

21 Nov 2024, 02:19

Type Values Removed Values Added
References () http://lists.opensuse.org/opensuse-updates/2014-11/msg00084.html - Third Party Advisory () http://lists.opensuse.org/opensuse-updates/2014-11/msg00084.html - Third Party Advisory
References () http://rhn.redhat.com/errata/RHSA-2014-1846.html - Third Party Advisory () http://rhn.redhat.com/errata/RHSA-2014-1846.html - Third Party Advisory
References () http://secunia.com/advisories/59991 - () http://secunia.com/advisories/59991 -
References () http://secunia.com/advisories/62284 - () http://secunia.com/advisories/62284 -
References () http://secunia.com/advisories/62294 - () http://secunia.com/advisories/62294 -
References () http://www.ubuntu.com/usn/USN-2403-1 - Patch, Third Party Advisory () http://www.ubuntu.com/usn/USN-2403-1 - Patch, Third Party Advisory
References () https://bugzilla.redhat.com/show_bug.cgi?id=1161443 - Issue Tracking () https://bugzilla.redhat.com/show_bug.cgi?id=1161443 - Issue Tracking

Information

Published : 2014-11-13 21:32

Updated : 2024-11-21 02:19


NVD link : CVE-2014-8564

Mitre link : CVE-2014-8564

CVE.ORG link : CVE-2014-8564


JSON object : View

Products Affected

opensuse

  • opensuse

redhat

  • enterprise_linux_server
  • enterprise_linux_desktop
  • enterprise_linux_hpc_node
  • enterprise_linux_workstation

canonical

  • ubuntu_linux

gnu

  • gnutls
CWE
CWE-310

Cryptographic Issues