Permissions, Privileges, and Access Controls in GnuTLS - CVE-2014-1959
Published: March 7, 2014 / Updated: July 28, 2020
Vulnerability identifier: #VU32576
CSH Severity: Medium
CVSS v4: 6.9 [CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:L/VA:N/SC:N/SI:N/SA:N]
CVE-ID: CVE-2014-1959
CWE-ID: CWE-264
Exploitation vector: Remote access
Exploit availability:
No public exploit available
Vulnerability details
The vulnerability allows a remote non-authenticated attacker to read and manipulate data.
lib/x509/verify.c in GnuTLS before 3.1.21 and 3.2.x before 3.2.11 treats version 1 X.509 certificates as intermediate CAs, which allows remote attackers to bypass intended restrictions by leveraging a X.509 V1 certificate from a trusted CA to issue new certificates.
Affected software
GnuTLS
Gentoo Linux
Slackware Linux
gnutls (Alpine package)
Gentoo Linux
Slackware Linux
gnutls (Alpine package)
How to mitigate CVE-2014-1959
Install update from vendor's website.
GnuTLS - update to 3.1.21
gnutls (Alpine package) - update to 3.0.29-r1
gnutls (Alpine package) - update to 3.0.29-r1
External References
- http://seclists.org/oss-sec/2014/q1/344
- http://seclists.org/oss-sec/2014/q1/345
- http://www.debian.org/security/2014/dsa-2866
- http://www.gnutls.org/security.html
- http://www.securityfocus.com/bid/65559
- http://www.ubuntu.com/usn/USN-2121-1
- https://www.gitorious.org/gnutls/gnutls/commit/b1abfe3d182d68539900092eb42fc62cf1bb7e7c