From 3104b1135385279627c62db4ddb42101a9d921d5 Mon Sep 17 00:00:00 2001 From: Ryan Steinmetz Date: Tue, 3 Jun 2014 19:42:40 +0000 Subject: [PATCH] - Document vulnerability in security/gnutls3 (CVE-2014-3466) --- security/vuxml/vuln.xml | 28 ++++++++++++++++++++++++++++ 1 file changed, 28 insertions(+) diff --git a/security/vuxml/vuln.xml b/security/vuxml/vuln.xml index ed9fb246b5eb..4018edd0a3c5 100644 --- a/security/vuxml/vuln.xml +++ b/security/vuxml/vuln.xml @@ -57,6 +57,34 @@ Notes: --> + + gnutls -- client-side memory corruption + + + gnutls3 + 3.13.1.25 + + + + +

GnuTLS project reports:

+
+

This vulnerability affects the client side of the gnutls library. + A server that sends a specially crafted ServerHello could corrupt + the memory of a requesting client.

+
+ + + + CVE-2014-3466 + http://www.gnutls.org/security.html#GNUTLS-SA-2014-3 + + + 2014-05-14 + 2014-06-03 + + + mumble -- multiple vulnerabilities