漏洞信息详情

GNUTLS Padding拒绝服务漏洞

  • CNNVD编号:CNNVD-200505-874
  • 危害等级: 中危
  • CVE编号: CVE-2005-1431
  • 漏洞类型: 其他
  • 发布时间: 2005-05-03
  • 威胁类型: 远程
  • 更新时间: 2005-10-20
  • 厂        商: gnu
  • 漏洞来源: The individual or ...

漏洞简介

GnuTLS 1.2的1.2.3之前版本和1.0的1.0.25之前版本中的\"记录包解析\"使得远程攻击者可以发起拒绝服务攻击,可能与gnutils_cipher.c中的填充字节有关。

漏洞公告

目前厂商已经发布了升级补丁以修复这个安全问题,补丁下载链接:

GNU GnuTLS 1.0

GNU gnutls-1.0.25.tar.gz

ftp://ftp.gnutls.org/pub/gnutls/gnutls-1.0.25.tar.gz

GNU GnuTLS 1.0.1

GNU gnutls-1.0.25.tar.gz

ftp://ftp.gnutls.org/pub/gnutls/gnutls-1.0.25.tar.gz

GNU GnuTLS 1.0.14

GNU gnutls-1.0.25.tar.gz

ftp://ftp.gnutls.org/pub/gnutls/gnutls-1.0.25.tar.gz

GNU GnuTLS 1.0.15

GNU gnutls-1.0.25.tar.gz

ftp://ftp.gnutls.org/pub/gnutls/gnutls-1.0.25.tar.gz

GNU GnuTLS 1.0.16

GNU gnutls-1.0.25.tar.gz

ftp://ftp.gnutls.org/pub/gnutls/gnutls-1.0.25.tar.gz

Ubuntu gnutls-bin_1.0.16-13ubuntu0.1_amd64.deb

Ubuntu 5.04 (Hoary Hedgehog)

http://security.ubuntu.com/ubuntu/pool/universe/g/gnutls11/gnutls-bin_ 1.0.16-13ubuntu0.1_amd64.deb

Ubuntu gnutls-bin_1.0.16-13ubuntu0.1_i386.deb

Ubuntu 5.04 (Hoary Hedgehog)

http://security.ubuntu.com/ubuntu/pool/universe/g/gnutls11/gnutls-bin_ 1.0.16-13ubuntu0.1_i386.deb

Ubuntu gnutls-bin_1.0.16-13ubuntu0.1_ia64.deb

Ubuntu 5.04 (Hoary Hedgehog)

http://security.ubuntu.com/ubuntu/pool/universe/g/gnutls11/gnutls-bin_ 1.0.16-13ubuntu0.1_ia64.deb

Ubuntu gnutls-bin_1.0.16-13ubuntu0.1_powerpc.deb

Ubuntu 5.04 (Hoary Hedgehog)

http://security.ubuntu.com/ubuntu/pool/universe/g/gnutls11/gnutls-bin_ 1.0.16-13ubuntu0.1_powerpc.deb

Ubuntu libgnutls11-dbg_1.0.16-13ubuntu0.1_amd64.deb

Ubuntu 5.04 (Hoary Hedgehog)

http://security.ubuntu.com/ubuntu/pool/universe/g/gnutls11/libgnutls11 -dbg_1.0.16-13ubuntu0.1_amd64.deb

Ubuntu libgnutls11-dbg_1.0.16-13ubuntu0.1_i386.deb

Ubuntu 5.04 (Hoary Hedgehog)

http://security.ubuntu.com/ubuntu/pool/universe/g/gnutls11/libgnutls11 -dbg_1.0.16-13ubuntu0.1_i386.deb

Ubuntu libgnutls11-dbg_1.0.16-13ubuntu0.1_ia64.deb

Ubuntu 5.04 (Hoary Hedgehog)

http://security.ubuntu.com/ubuntu/pool/universe/g/gnutls11/libgnutls11 -dbg_1.0.16-13ubuntu0.1_ia64.deb

Ubuntu libgnutls11-dbg_1.0.16-13ubuntu0.1_powerpc.deb

Ubuntu 5.04 (Hoary Hedgehog)

http://security.ubuntu.com/ubuntu/pool/universe/g/gnutls11/libgnutls11 -dbg_1.0.16-13ubuntu0.1_powerpc.deb

Ubuntu libgnutls11-dev_1.0.16-13ubuntu0.1_amd64.deb

Ubuntu 5.04 (Hoary Hedgehog)

http://security.ubuntu.com/ubuntu/pool/main/g/gnutls11/libgnutls11-dev _1.0.16-13ubuntu0.1_amd64.deb

Ubuntu libgnutls11-dev_1.0.16-13ubuntu0.1_i386.deb

Ubuntu 5.04 (Hoary Hedgehog)

http://security.ubuntu.com/ubuntu/pool/main/g/gnutls11/libgnutls11-dev _1.0.16-13ubuntu0.1_i386.deb

Ubuntu libgnutls11-dev_1.0.16-13ubuntu0.1_ia64.deb

Ubuntu 5.04 (Hoary Hedgehog)

http://security.ubuntu.com/ubuntu/pool/main/g/gnutls11/libgnutls11-dev _1.0.16-13ubuntu0.1_ia64.deb

Ubuntu libgnutls11-dev_1.0.16-13ubuntu0.1_powerpc.deb

Ubuntu 5.04 (Hoary Hedgehog)

http://security.ubuntu.com/ubuntu/pool/main/g/gnutls11/libgnutls11-dev _1.0.16-13ubuntu0.1_powerpc.deb

Ubuntu libgnutls11_1.0.16-13ubuntu0.1_amd64.deb

Ubuntu 5.04 (Hoary Hedgehog)

http://security.ubuntu.com/ubuntu/pool/main/g/gnutls11/libgnutls11_1.0 .16-13ubuntu0.1_amd64.deb

Ubuntu libgnutls11_1.0.16-13ubuntu0.1_i386.deb

Ubuntu 5.04 (Hoary Hedgehog)

http://security.ubuntu.com/ubuntu/pool/main/g/gnutls11/libgnutls11_1.0 .16-13ubuntu0.1_i386.deb

Ubuntu libgnutls11_1.0.16-13ubuntu0.1_ia64.deb

Ubuntu 5.04 (Hoary Hedgehog)

http://security.ubuntu.com/ubuntu/pool/main/g/gnutls11/libgnutls11_1.0 .16-13ubuntu0.1_ia64.deb

Ubuntu libgnutls11_1.0.16-13ubuntu0.1_powerpc.deb

Ubuntu 5.04 (Hoary Hedgehog)

http://security.ubuntu.com/ubuntu/pool/main/g/gnutls11/libgnutls11_1.0 .16-13ubuntu0.1_powerpc.deb

GNU GnuTLS 1.0.17

Fedora gnutls-1.0.20-3.1.1.i386.rpm

RedHat Fedora Core 3

http://download.fedora.redhat.com/pub/fedora/linux/core/updates/3/

Fedora gnutls-1.0.20-3.1.1.x86_64.rpm

RedHat Fedora Core 3

http://download.fedora.redhat.com/pub/fedora/linux/core/updates/3/

Fedora gnutls-debuginfo-1.0.20-3.1.1.i386.rpm

RedHat Fedora Core 3

http://download.fedora.redhat.com/pub/fedora/linux/core/updates/3/

Fedora gnutls-debuginfo-1.0.20-3.1.1.x86_64.rpm

RedHat Fedora Core 3

http://download.fedora.redhat.com/pub/fedora/linux/core/updates/3/

Fedora gnutls-devel-1.0.20-3.1.1.i386.rpm

RedHat Fedora Core 3

http://download.fedora.redhat.com/pub

参考网址

来源: XF

名称: gnutls-record-parsing-dos(20328)

链接:http://xforce.iss.net/xforce/xfdb/20328

来源: BID

名称: 13477

链接:http://www.securityfocus.com/bid/13477

来源: OSVDB

名称: 16054

链接:http://www.osvdb.org/16054

来源: SECTRACK

名称: 1013861

链接:http://securitytracker.com/id?1013861

来源: SECUNIA

名称: 15193

链接:http://secunia.com/advisories/15193

来源: MLIST

名称: [gnutls-dev] 20050428 GnuTLS 1.2.3 and 1.0.25

链接:http://lists.gnupg.org/pipermail/gnutls-dev/2005-April/000858.html

来源: REDHAT

名称: RHSA-2005:430

链接:http://www.redhat.com/support/errata/RHSA-2005-430.html

补丁

    暂无

漏洞信息快速查询

相关漏洞

更多