Buffer overflow in GnuTLS - CVE-2014-3466
Published: June 3, 2014 / Updated: July 28, 2020
Vulnerability identifier: #VU32530
CSH Severity: Medium
CVSS v4: 6.9 [CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N]
CVE-ID: CVE-2014-3466
CWE-ID: CWE-119
Exploitation vector: Remote access
Exploit availability:
No public exploit available
Vulnerability details
The vulnerability allows a remote non-authenticated attacker to read and manipulate data.
Buffer overflow in the read_server_hello function in lib/gnutls_handshake.c in GnuTLS before 3.1.25, 3.2.x before 3.2.15, and 3.3.x before 3.3.4 allows remote servers to cause a denial of service (memory corruption) or possibly execute arbitrary code via a long session id in a ServerHello message.
Affected software
GnuTLS
Gentoo Linux
Amazon Linux AMI
SUSE Linux
Slackware Linux
gnutls (Alpine package)
Gentoo Linux
Amazon Linux AMI
SUSE Linux
Slackware Linux
gnutls (Alpine package)
How to mitigate CVE-2014-3466
Install update from vendor's website.
GnuTLS - addressed in versions 3.1.25, 3.2.15, 3.3.4
gnutls (Alpine package) - update to 3.1.25-r0
gnutls (Alpine package) - update to 3.1.25-r0
External References
- http://linux.oracle.com/errata/ELSA-2014-0594.html
- http://linux.oracle.com/errata/ELSA-2014-0595.html
- http://lists.opensuse.org/opensuse-security-announce/2014-06/msg00002.html
- http://lists.opensuse.org/opensuse-security-announce/2014-06/msg00007.html
- http://lists.opensuse.org/opensuse-security-announce/2014-06/msg00010.html
- http://lists.opensuse.org/opensuse-security-announce/2014-06/msg00015.html
- http://radare.today/technical-analysis-of-the-gnutls-hello-vulnerability/
- http://rhn.redhat.com/errata/RHSA-2014-0594.html
- http://rhn.redhat.com/errata/RHSA-2014-0595.html
- http://rhn.redhat.com/errata/RHSA-2014-0684.html
- http://rhn.redhat.com/errata/RHSA-2014-0815.html
- http://secunia.com/advisories/58340
- http://secunia.com/advisories/58598
- http://secunia.com/advisories/58601
- http://secunia.com/advisories/58642
- http://secunia.com/advisories/59016
- http://secunia.com/advisories/59021
- http://secunia.com/advisories/59057
- http://secunia.com/advisories/59086
- http://secunia.com/advisories/59408
- http://secunia.com/advisories/59838
- http://secunia.com/advisories/60384
- http://www.debian.org/security/2014/dsa-2944
- http://www.gnutls.org/security.html
- http://www.novell.com/support/kb/doc.php?id=7015302
- http://www.novell.com/support/kb/doc.php?id=7015303
- http://www.securityfocus.com/bid/67741
- http://www.securitytracker.com/id/1030314
- http://www.ubuntu.com/usn/USN-2229-1
- http://www-01.ibm.com/support/docview.wss?uid=swg21678776
- http://www-947.ibm.com/support/entry/portal/docdisplay?lndocid=MIGR-5096155
- https://bugzilla.redhat.com/show_bug.cgi?id=1101932
- https://www.gitorious.org/gnutls/gnutls/commit/688ea6428a432c39203d00acd1af0e7684e5ddfd