Security Advisories
CVEs affecting projects tracked on Release Alert, from NVD & OSV.
CVE-2024-0567
7.5
HIGHCVSS v3
Published
January 16, 2024
Affected
6 projects
Assigned by
Red Hat
Severity scale
010
Description
A vulnerability was found in GnuTLS, where a cockpit (which uses gnuTLS) rejects a certificate chain with distributed trust. This issue occurs when validating a certificate chain with cockpit-certificate-ensure. This flaw allows an unauthenticated, remote client or attacker to initiate a denial of service attack.
gnutls/gnutlsGitLabGnuTLS is a secure communications library implementing the SSL, TLS and DTLS protocols and technologies around them. It provides a simple C language API to access the secure communications protocols. https://www.gnutls.org
GitLabGnuTLS is a secure communications library implementing the SSL, TLS and DTLS protocols and technologies around them. It provides a simple C language API to access the secure communications protocols. https://www.gnutls.org= *, >= 3.7.0, < 3.8.3NVD
Crates.io
Docker Hub
NPM
RubyGems