CVE-2008-1949: Critical severity gnutls vulnerability

Published May 21, 2008

Updated

The gnutlsrecvclientkxmessage function in lib/gnutlskx.c in libgnutls in gnutls-serv in GnuTLS before 2.2.4 continues to process Client Hello messages within a TLS message after one has already been processed, which allows remote attackers to cause a denial of service (NULL dereference and crash) via a TLS message containing multiple Client Hello messages, aka GNUTLS-SA-2008-1-2.

Affected Software

105 affected components

GNU GnuTLS=2.3.5

GNU GnuTLS=1.6.0

GNU GnuTLS=2.0.0

GNU GnuTLS=1.5.0

GNU GnuTLS=1.2.8

GNU GnuTLS=1.1.14

GNU GnuTLS=2.3.4

GNU GnuTLS=1.7.3

GNU GnuTLS=1.4.1

GNU GnuTLS=1.4.3

GNU GnuTLS=1.2.11

GNU GnuTLS=1.1.21

GNU GnuTLS=1.7.5

GNU GnuTLS=1.7.11

GNU GnuTLS=1.0.20

GNU GnuTLS=1.2.5

GNU GnuTLS=2.2.4

GNU GnuTLS=1.2.4

GNU GnuTLS=1.3.1

GNU GnuTLS=1.0.24

GNU GnuTLS=1.7.15

GNU GnuTLS=1.6.1

GNU GnuTLS=1.0.21

GNU GnuTLS=1.4.2

GNU GnuTLS=1.7.8

GNU GnuTLS=1.7.0

GNU GnuTLS=2.1.0

GNU GnuTLS=2.3.1

GNU GnuTLS=2.2.5

GNU GnuTLS=2.1.1

GNU GnuTLS=2.3.8

GNU GnuTLS=1.7.18

GNU GnuTLS=1.1.20

GNU GnuTLS=2.1.7

GNU GnuTLS=2.1.4

GNU GnuTLS=1.2.10

GNU GnuTLS=1.5.3

GNU GnuTLS=1.1.22

GNU GnuTLS=1.6.3

GNU GnuTLS=2.1.6

GNU GnuTLS=1.4.5

GNU GnuTLS=1.5.1

GNU GnuTLS=1.4.0

GNU GnuTLS=1.7.4

GNU GnuTLS=1.7.13

GNU GnuTLS=2.3.2

GNU GnuTLS=2.3.9

GNU GnuTLS=2.2.2

GNU GnuTLS=2.2.0

GNU GnuTLS=2.3.11

GNU GnuTLS=1.3.4

GNU GnuTLS=1.0.19

GNU GnuTLS=1.7.2

GNU GnuTLS=1.2.1

GNU GnuTLS=1.1.19

GNU GnuTLS=2.0.4

GNU GnuTLS=1.1.18

GNU GnuTLS=1.5.4

GNU GnuTLS=1.7.9

GNU GnuTLS=2.1.3

GNU GnuTLS=1.7.10

GNU GnuTLS=1.1.13

GNU GnuTLS=2.3.7

GNU GnuTLS=2.0.3

GNU GnuTLS=1.2.2

GNU GnuTLS=1.7.19

GNU GnuTLS=1.5.5

GNU GnuTLS=1.2.0

GNU GnuTLS=1.0.18

GNU GnuTLS=1.2.7

GNU GnuTLS=1.3.2

GNU GnuTLS=1.0.25

GNU GnuTLS=1.1.15

GNU GnuTLS=2.1.2

GNU GnuTLS=1.0.23

GNU GnuTLS=1.3.0

GNU GnuTLS=1.3.5

GNU GnuTLS=1.7.14

GNU GnuTLS=1.1.23

GNU GnuTLS=1.2.3

GNU GnuTLS=1.2.6

GNU GnuTLS=2.3.6

GNU GnuTLS=1.2.9

GNU GnuTLS=1.7.17

GNU GnuTLS=2.3.3

GNU GnuTLS=2.1.8

GNU GnuTLS=1.7.7

GNU GnuTLS=2.0.1

GNU GnuTLS=1.7.6

GNU GnuTLS=2.2.1

GNU GnuTLS=2.1.5

GNU GnuTLS=1.7.1

GNU GnuTLS=1.5.2

GNU GnuTLS=1.7.16

GNU GnuTLS=1.7.12

GNU GnuTLS=1.1.16

GNU GnuTLS=2.3.10

GNU GnuTLS=1.0.22

GNU GnuTLS=2.0.2

GNU GnuTLS=2.3.0

GNU GnuTLS=1.6.2

GNU GnuTLS=2.2.3

GNU GnuTLS=1.4.4

GNU GnuTLS=1.1.17

GNU GnuTLS=1.3.3

Remediation

Patch Available

http://www.securityfocus.com/bid/29292

Event History

May 21, 2008

CVE Published

via MITRE·10:00 AM

Data Sourced

via MITRE·10:00 AM

Description

Frequently Asked Questions

What is the severity of CVE-2008-1949?

CVE-2008-1949 has a severity rating that indicates it can lead to a denial of service due to NULL dereference.

How do I fix CVE-2008-1949?

To fix CVE-2008-1949, upgrade to GnuTLS version 2.2.4 or later.

What does CVE-2008-1949 affect?

CVE-2008-1949 affects multiple versions of GnuTLS prior to version 2.2.4.

What is the potential impact of CVE-2008-1949?

The potential impact of CVE-2008-1949 includes causing a denial of service through the improper handling of Client Hello messages.

Is CVE-2008-1949 easy to exploit?

Yes, CVE-2008-1949 can be exploited remotely by sending crafted TLS messages.