CVE-2014-1959

Published: Mar 7, 2014Modified: May 6, 2026

5.8

Vector

AV:N/AC:M/Au:N/C:P/I:P/A:N

Exploitability: 8.6 / Impact: 4.9

Source: NVD

Description

lib/x509/verify.c in GnuTLS before 3.1.21 and 3.2.x before 3.2.11 treats version 1 X.509 certificates as intermediate CAs, which allows remote attackers to bypass intended restrictions by leveraging a X.509 V1 certificate from a trusted CA to issue new certificates.

Affected (33)

Products: Gnu: Gnutls

Gnu

1 product

Gnutls

Configuration A

21 vulnerable

Vulnerable Software	Affected Versions
Gnu Gnutls	Up to 3.1.20
Gnu Gnutls	Version 3.1.0
Gnu Gnutls	Version 3.1.10
Gnu Gnutls	Version 3.1.11
Gnu Gnutls	Version 3.1.12
Gnu Gnutls	Version 3.1.13
Gnu Gnutls	Version 3.1.14
Gnu Gnutls	Version 3.1.15
Gnu Gnutls	Version 3.1.16
Gnu Gnutls	Version 3.1.17
Gnu Gnutls	Version 3.1.18
Gnu Gnutls	Version 3.1.19
Gnu Gnutls	Version 3.1.1
Gnu Gnutls	Version 3.1.2
Gnu Gnutls	Version 3.1.3
Gnu Gnutls	Version 3.1.4
Gnu Gnutls	Version 3.1.5
Gnu Gnutls	Version 3.1.6
Gnu Gnutls	Version 3.1.7
Gnu Gnutls	Version 3.1.8
Gnu Gnutls	Version 3.1.9

Configuration B

12 vulnerable

Vulnerable Software	Affected Versions
Gnu Gnutls	Up to 3.2.10
Gnu Gnutls	Version 3.2.0
Gnu Gnutls	Version 3.2.1
Gnu Gnutls	Version 3.2.2
Gnu Gnutls	Version 3.2.3
Gnu Gnutls	Version 3.2.4
Gnu Gnutls	Version 3.2.5
Gnu Gnutls	Version 3.2.6
Gnu Gnutls	Version 3.2.7
Gnu Gnutls	Version 3.2.8.1
Gnu Gnutls	Version 3.2.8
Gnu Gnutls	Version 3.2.9