CVE-2008-1949

Published: May 21, 2008Modified: Apr 23, 2026

9.3

Vector

AV:N/AC:M/Au:N/C:C/I:C/A:C

Exploitability: 8.6 / Impact: 10.0

Source: NVD

Description

The _gnutls_recv_client_kx_message function in lib/gnutls_kx.c in libgnutls in gnutls-serv in GnuTLS before 2.2.4 continues to process Client Hello messages within a TLS message after one has already been processed, which allows remote attackers to cause a denial of service (NULL dereference and crash) via a TLS message containing multiple Client Hello messages, aka GNUTLS-SA-2008-1-2.

Affected (105)

Products: Gnu: Gnutls

Gnu

1 product

Gnutls

Configuration A

105 vulnerable

Vulnerable Software	Affected Versions
Gnu Gnutls	Version 1.0.18
Gnu Gnutls	Version 1.0.19
Gnu Gnutls	Version 1.0.20
Gnu Gnutls	Version 1.0.21
Gnu Gnutls	Version 1.0.22
Gnu Gnutls	Version 1.0.23
Gnu Gnutls	Version 1.0.24
Gnu Gnutls	Version 1.0.25
Gnu Gnutls	Version 1.1.13
Gnu Gnutls	Version 1.1.14
Gnu Gnutls	Version 1.1.15
Gnu Gnutls	Version 1.1.16
Gnu Gnutls	Version 1.1.17
Gnu Gnutls	Version 1.1.18
Gnu Gnutls	Version 1.1.19
Gnu Gnutls	Version 1.1.20
Gnu Gnutls	Version 1.1.21
Gnu Gnutls	Version 1.1.22
Gnu Gnutls	Version 1.1.23
Gnu Gnutls	Version 1.2.0
Gnu Gnutls	Version 1.2.10
Gnu Gnutls	Version 1.2.11
Gnu Gnutls	Version 1.2.1
Gnu Gnutls	Version 1.2.2
Gnu Gnutls	Version 1.2.3
Gnu Gnutls	Version 1.2.4
Gnu Gnutls	Version 1.2.5
Gnu Gnutls	Version 1.2.6
Gnu Gnutls	Version 1.2.7
Gnu Gnutls	Version 1.2.8
Gnu Gnutls	Version 1.2.9
Gnu Gnutls	Version 1.3.0
Gnu Gnutls	Version 1.3.1
Gnu Gnutls	Version 1.3.2
Gnu Gnutls	Version 1.3.3
Gnu Gnutls	Version 1.3.4
Gnu Gnutls	Version 1.3.5
Gnu Gnutls	Version 1.4.0
Gnu Gnutls	Version 1.4.1
Gnu Gnutls	Version 1.4.2
Gnu Gnutls	Version 1.4.3
Gnu Gnutls	Version 1.4.4
Gnu Gnutls	Version 1.4.5
Gnu Gnutls	Version 1.5.0
Gnu Gnutls	Version 1.5.1
Gnu Gnutls	Version 1.5.2
Gnu Gnutls	Version 1.5.3
Gnu Gnutls	Version 1.5.4
Gnu Gnutls	Version 1.5.5
Gnu Gnutls	Version 1.6.0
Gnu Gnutls	Version 1.6.1
Gnu Gnutls	Version 1.6.2
Gnu Gnutls	Version 1.6.3
Gnu Gnutls	Version 1.7.0
Gnu Gnutls	Version 1.7.10
Gnu Gnutls	Version 1.7.11
Gnu Gnutls	Version 1.7.12
Gnu Gnutls	Version 1.7.13
Gnu Gnutls	Version 1.7.14
Gnu Gnutls	Version 1.7.15
Gnu Gnutls	Version 1.7.16
Gnu Gnutls	Version 1.7.17
Gnu Gnutls	Version 1.7.18
Gnu Gnutls	Version 1.7.19
Gnu Gnutls	Version 1.7.1
Gnu Gnutls	Version 1.7.2
Gnu Gnutls	Version 1.7.3
Gnu Gnutls	Version 1.7.4
Gnu Gnutls	Version 1.7.5
Gnu Gnutls	Version 1.7.6
Gnu Gnutls	Version 1.7.7
Gnu Gnutls	Version 1.7.8
Gnu Gnutls	Version 1.7.9
Gnu Gnutls	Version 2.0.0
Gnu Gnutls	Version 2.0.1
Gnu Gnutls	Version 2.0.2
Gnu Gnutls	Version 2.0.3
Gnu Gnutls	Version 2.0.4
Gnu Gnutls	Version 2.1.0
Gnu Gnutls	Version 2.1.1
Gnu Gnutls	Version 2.1.2
Gnu Gnutls	Version 2.1.3
Gnu Gnutls	Version 2.1.4
Gnu Gnutls	Version 2.1.5
Gnu Gnutls	Version 2.1.6
Gnu Gnutls	Version 2.1.7
Gnu Gnutls	Version 2.1.8
Gnu Gnutls	Version 2.2.0
Gnu Gnutls	Version 2.2.1
Gnu Gnutls	Version 2.2.2
Gnu Gnutls	Version 2.2.3
Gnu Gnutls	Version 2.2.4
Gnu Gnutls	Version 2.2.5
Gnu Gnutls	Version 2.3.0
Gnu Gnutls	Version 2.3.10
Gnu Gnutls	Version 2.3.11
Gnu Gnutls	Version 2.3.1
Gnu Gnutls	Version 2.3.2
Gnu Gnutls	Version 2.3.3
Gnu Gnutls	Version 2.3.4
Gnu Gnutls	Version 2.3.5
Gnu Gnutls	Version 2.3.6
Gnu Gnutls	Version 2.3.7
Gnu Gnutls	Version 2.3.8
Gnu Gnutls	Version 2.3.9

Related CWEs

CWE-287

Improper Authentication

When an actor claims to have a given identity, the product does not prove or insufficiently proves that the claim is correct.

References (80)

http://git.savannah.gnu.org/gitweb/?p=gnutls.git%3Ba=commitdiff%3Bh=bc8102405fda11ea00ca3b42acc4f4bce9d6e97b

Source: secalert@redhat.com

http://lists.gnu.org/archive/html/gnutls-devel/2008-05/msg00051.html

Source: secalert@redhat.com

http://lists.gnu.org/archive/html/gnutls-devel/2008-05/msg00055.html

Source: secalert@redhat.com

http://lists.gnu.org/archive/html/gnutls-devel/2008-05/msg00060.html

Source: secalert@redhat.com

http://lists.opensuse.org/opensuse-security-announce/2008-09/msg00003.html

Source: secalert@redhat.com

http://secunia.com/advisories/30287

Source: secalert@redhat.com

Vendor Advisory

http://secunia.com/advisories/30302

Source: secalert@redhat.com

Vendor Advisory

http://secunia.com/advisories/30317

Source: secalert@redhat.com

Vendor Advisory

http://secunia.com/advisories/30324

Source: secalert@redhat.com

Vendor Advisory

http://secunia.com/advisories/30330

Source: secalert@redhat.com

Vendor Advisory

http://secunia.com/advisories/30331

Source: secalert@redhat.com

Vendor Advisory

http://secunia.com/advisories/30338

Source: secalert@redhat.com

Vendor Advisory

http://secunia.com/advisories/30355

Source: secalert@redhat.com

http://secunia.com/advisories/31939

Source: secalert@redhat.com

http://security.gentoo.org/glsa/glsa-200805-20.xml

Source: secalert@redhat.com

http://securityreason.com/securityalert/3902

Source: secalert@redhat.com

http://sourceforge.net/project/shownotes.php?release_id=600646&group_id=21558

Source: secalert@redhat.com

http://wiki.rpath.com/wiki/Advisories:rPSA-2008-0174

Source: secalert@redhat.com

http://www.cert.fi/haavoittuvuudet/advisory-gnutls.html

Source: secalert@redhat.com

Exploit

http://www.debian.org/security/2008/dsa-1581

Source: secalert@redhat.com

http://www.kb.cert.org/vuls/id/252626

Source: secalert@redhat.com

US Government Resource

http://www.mandriva.com/security/advisories?name=MDVSA-2008:106

Source: secalert@redhat.com

http://www.openwall.com/lists/oss-security/2008/05/20/1

Source: secalert@redhat.com

http://www.openwall.com/lists/oss-security/2008/05/20/2

Source: secalert@redhat.com

http://www.openwall.com/lists/oss-security/2008/05/20/3

Source: secalert@redhat.com

http://www.redhat.com/support/errata/RHSA-2008-0489.html

Source: secalert@redhat.com

http://www.redhat.com/support/errata/RHSA-2008-0492.html

Source: secalert@redhat.com

http://www.securityfocus.com/archive/1/492282/100/0/threaded

Source: secalert@redhat.com

http://www.securityfocus.com/archive/1/492464/100/0/threaded

Source: secalert@redhat.com

http://www.securityfocus.com/bid/29292

Source: secalert@redhat.com

Patch

http://www.securitytracker.com/id?1020058

Source: secalert@redhat.com

http://www.ubuntu.com/usn/usn-613-1

Source: secalert@redhat.com

http://www.vupen.com/english/advisories/2008/1582/references

Source: secalert@redhat.com

http://www.vupen.com/english/advisories/2008/1583/references

Source: secalert@redhat.com

https://exchange.xforce.ibmcloud.com/vulnerabilities/42530

Source: secalert@redhat.com

https://issues.rpath.com/browse/RPL-2552

Source: secalert@redhat.com

https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9519

Source: secalert@redhat.com

https://www.redhat.com/archives/fedora-package-announce/2008-May/msg00487.html

Source: secalert@redhat.com

https://www.redhat.com/archives/fedora-package-announce/2008-May/msg00590.html

Source: secalert@redhat.com

https://www.redhat.com/archives/fedora-package-announce/2008-May/msg00615.html

Source: secalert@redhat.com

http://git.savannah.gnu.org/gitweb/?p=gnutls.git%3Ba=commitdiff%3Bh=bc8102405fda11ea00ca3b42acc4f4bce9d6e97b