CVE-2024-0567

Published: Jan 16, 2024Modified: Jun 17, 2026

7.5

Vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Exploitability: 3.9 / Impact: 3.6

Source: NVD

Description

A vulnerability was found in GnuTLS, where a cockpit (which uses gnuTLS) rejects a certificate chain with distributed trust. This issue occurs when validating a certificate chain with cockpit-certificate-ensure. This flaw allows an unauthenticated, remote client or attacker to initiate a denial of service attack.

Affected (5)

Products: Gnu: Gnutls · Fedoraproject: Fedora · Netapp: Active Iq Unified Manager · +1 more

Show all products

Gnu: Gnutls · Fedoraproject: Fedora · Netapp: Active Iq Unified Manager · Debian: Debian Linux

1 product

1 product

1 product

Active Iq Unified Manager

1 product

Configuration A

1 vulnerable

Vulnerable Software	Affected Versions
Gnu Gnutls	From 3.7.0 to 3.8.3

Configuration B

2 vulnerable

Vulnerable Software	Affected Versions
Fedoraproject Fedora	Version 38
Fedoraproject Fedora	Version 39

Configuration C

1 vulnerable

Vulnerable Software	Affected Versions
Netapp Active Iq Unified Manager	All versions

Configuration D

1 vulnerable

Vulnerable Software	Affected Versions
Debian Debian Linux	Version 11.0

Related CWEs

Improper Verification of Cryptographic Signature

The product does not verify, or incorrectly verifies, the cryptographic signature for data.

References (20)

https://access.redhat.com/errata/RHSA-2024:0533

Source: secalert@redhat.com

Third Party Advisory

https://access.redhat.com/errata/RHSA-2024:1082

Source: secalert@redhat.com

Third Party Advisory

https://access.redhat.com/errata/RHSA-2024:1383

Source: secalert@redhat.com

https://access.redhat.com/errata/RHSA-2024:2094

Source: secalert@redhat.com

https://access.redhat.com/security/cve/CVE-2024-0567

Source: secalert@redhat.com

Third Party Advisory

https://bugzilla.redhat.com/show_bug.cgi?id=2258544

Source: secalert@redhat.com

ExploitIssue TrackingThird Party Advisory

https://gitlab.com/gnutls/gnutls/-/issues/1521

Source: secalert@redhat.com

ExploitIssue TrackingPatchVendor Advisory

https://lists.gnupg.org/pipermail/gnutls-help/2024-January/004841.html

Source: secalert@redhat.com

Mailing List

http://www.openwall.com/lists/oss-security/2024/01/19/3

Source: af854a3a-2127-422b-91ae-364da2661108

https://access.redhat.com/errata/RHSA-2024:0533

Source: af854a3a-2127-422b-91ae-364da2661108

Third Party Advisory

https://access.redhat.com/errata/RHSA-2024:1082

Source: af854a3a-2127-422b-91ae-364da2661108

Third Party Advisory

https://access.redhat.com/errata/RHSA-2024:1383

Source: af854a3a-2127-422b-91ae-364da2661108

https://access.redhat.com/errata/RHSA-2024:2094

Source: af854a3a-2127-422b-91ae-364da2661108

https://access.redhat.com/security/cve/CVE-2024-0567

Source: af854a3a-2127-422b-91ae-364da2661108

Third Party Advisory

https://bugzilla.redhat.com/show_bug.cgi?id=2258544

Source: af854a3a-2127-422b-91ae-364da2661108

ExploitIssue TrackingThird Party Advisory

https://gitlab.com/gnutls/gnutls/-/issues/1521

Source: af854a3a-2127-422b-91ae-364da2661108

ExploitIssue TrackingPatchVendor Advisory

https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/7ZEIOLORQ7N6WRPFXZSYDL2MC4LP7VFV/

Source: af854a3a-2127-422b-91ae-364da2661108

https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/GNXKVR5YNUEBNHAHM5GSYKBZX4W2HMN2/

Source: af854a3a-2127-422b-91ae-364da2661108

https://lists.gnupg.org/pipermail/gnutls-help/2024-January/004841.html

Source: af854a3a-2127-422b-91ae-364da2661108

Mailing List

https://security.netapp.com/advisory/ntap-20240202-0011/

Source: af854a3a-2127-422b-91ae-364da2661108

Timeline

No history available yet.