CVE-2014-3465
N/A
Published: June 10, 2014 at 02:00 PM UTC
Updated: June 17, 2026 at 12:08 AM UTC
1 product affected across 1 vendorGnutls
Using N/A by N/A?
Get instant alerts when new vulnerabilities affect N/A - before attackers find them.
Real-time alertsTrack your software stackFree plan available
Severity
N/A
Exploit prediction
EPSS 4%
Description
The gnutls_x509_dn_oid_name function in lib/x509/common.c in GnuTLS 3.0 before 3.1.20 and 3.2.x before 3.2.10 allows remote attackers to cause a denial of service (NULL pointer dereference) via a crafted X.509 certificate, related to a missing LDAP description for an OID when printing the DN.
Affected
Our own answer: ranges merged, affected separated from platform-only, with confidence and review flags.
3.0.03.0.13.0.103.0.113.0.123.0.133.0.143.0.153.0.163.0.173.0.183.0.193.0.23.0.203.0.213.0.223.0.233.0.243.0.253.0.263.0.273.0.283.0.33.0.43.0.53.0.63.0.73.0.83.0.93.1.03.1.13.1.103.1.113.1.123.1.133.1.143.1.153.1.163.1.173.1.183.1.193.1.23.1.33.1.43.1.53.1.63.1.73.1.83.1.93.2.03.2.13.2.23.2.33.2.43.2.53.2.63.2.73.2.83.2.8.13.2.9
Remediation
No guide yetNo remediation guidance has been written for this CVE yet. What the record does show:
References (8)
Mailing Listx_refsource_MLIST
Source: [email protected]
http://lists.gnutls.org/pipermail/gnutls-help/2014-January/003326.htmlMailing Listx_refsource_MLIST
Source: [email protected]
http://lists.gnutls.org/pipermail/gnutls-help/2014-January/003327.htmlVendor Advisoryx_refsource_SUSE
Source: [email protected]
http://lists.opensuse.org/opensuse-security-announce/2014-06/msg00007.htmlVendor Advisoryx_refsource_SUSE
Source: [email protected]
http://lists.opensuse.org/opensuse-security-announce/2014-06/msg00010.htmlVendor Advisoryx_refsource_REDHAT
Source: [email protected]
http://rhn.redhat.com/errata/RHSA-2014-0684.htmlx_refsource_CONFIRM
Source: [email protected]
https://www.gitorious.org/gnutls/gnutls/commit/d3648ebb04b650e6d20a2ec1fb839256b30b9fc6Quick Info
StatusMODIFIED
CWE
NVD-CWE-Other
Get alerted
Stop reading CVE feeds looking for your own stack
Track the products you run and VulnTracker tells you when a new CVE affects them — with what is known about fixing it, and nothing about the rest.
Free plan, no card