CVE-2008-1950: Medium severity gnutls vulnerability

Published May 21, 2008
·
Updated

Integer signedness error in the gnutlsciphertext2compressed function in lib/gnutlscipher.c in libgnutls in GnuTLS before 2.2.4 allows remote attackers to cause a denial of service (buffer over-read and crash) via a certain integer value in the Random field in an encrypted Client Hello message within a TLS record with an invalid Record Length, which leads to an invalid cipher padding length, aka GNUTLS-SA-2008-1-3.

Affected Software

105 affected components
GNU GnuTLS=2.3.5
GNU GnuTLS=1.6.0
GNU GnuTLS=2.0.0
GNU GnuTLS=1.5.0
GNU GnuTLS=1.2.8
GNU GnuTLS=1.1.14
GNU GnuTLS=2.3.4
GNU GnuTLS=1.7.3
GNU GnuTLS=1.4.1
GNU GnuTLS=1.4.3
GNU GnuTLS=1.2.11
GNU GnuTLS=1.1.21
GNU GnuTLS=1.7.5
GNU GnuTLS=1.7.11
GNU GnuTLS=1.0.20
GNU GnuTLS=1.2.5
GNU GnuTLS=2.2.4
GNU GnuTLS=1.2.4
GNU GnuTLS=1.3.1
GNU GnuTLS=1.0.24
GNU GnuTLS=1.7.15
GNU GnuTLS=1.6.1
GNU GnuTLS=1.0.21
GNU GnuTLS=1.4.2
GNU GnuTLS=1.7.8
GNU GnuTLS=1.7.0
GNU GnuTLS=2.1.0
GNU GnuTLS=2.3.1
GNU GnuTLS=2.2.5
GNU GnuTLS=2.1.1
GNU GnuTLS=2.3.8
GNU GnuTLS=1.7.18
GNU GnuTLS=1.1.20
GNU GnuTLS=2.1.7
GNU GnuTLS=2.1.4
GNU GnuTLS=1.2.10
GNU GnuTLS=1.5.3
GNU GnuTLS=1.1.22
GNU GnuTLS=1.6.3
GNU GnuTLS=2.1.6
GNU GnuTLS=1.4.5
GNU GnuTLS=1.5.1
GNU GnuTLS=1.4.0
GNU GnuTLS=1.7.4
GNU GnuTLS=1.7.13
GNU GnuTLS=2.3.2
GNU GnuTLS=2.3.9
GNU GnuTLS=2.2.2
GNU GnuTLS=2.2.0
GNU GnuTLS=2.3.11
GNU GnuTLS=1.3.4
GNU GnuTLS=1.0.19
GNU GnuTLS=1.7.2
GNU GnuTLS=1.2.1
GNU GnuTLS=1.1.19
GNU GnuTLS=2.0.4
GNU GnuTLS=1.1.18
GNU GnuTLS=1.5.4
GNU GnuTLS=1.7.9
GNU GnuTLS=2.1.3
GNU GnuTLS=1.7.10
GNU GnuTLS=1.1.13
GNU GnuTLS=2.3.7
GNU GnuTLS=2.0.3
GNU GnuTLS=1.2.2
GNU GnuTLS=1.7.19
GNU GnuTLS=1.5.5
GNU GnuTLS=1.2.0
GNU GnuTLS=1.0.18
GNU GnuTLS=1.2.7
GNU GnuTLS=1.3.2
GNU GnuTLS=1.0.25
GNU GnuTLS=1.1.15
GNU GnuTLS=2.1.2
GNU GnuTLS=1.0.23
GNU GnuTLS=1.3.0
GNU GnuTLS=1.3.5
GNU GnuTLS=1.7.14
GNU GnuTLS=1.1.23
GNU GnuTLS=1.2.3
GNU GnuTLS=1.2.6
GNU GnuTLS=2.3.6
GNU GnuTLS=1.2.9
GNU GnuTLS=1.7.17
GNU GnuTLS=2.3.3
GNU GnuTLS=2.1.8
GNU GnuTLS=1.7.7
GNU GnuTLS=2.0.1
GNU GnuTLS=1.7.6
GNU GnuTLS=2.2.1
GNU GnuTLS=2.1.5
GNU GnuTLS=1.7.1
GNU GnuTLS=1.5.2
GNU GnuTLS=1.7.16
GNU GnuTLS=1.7.12
GNU GnuTLS=1.1.16
GNU GnuTLS=2.3.10
GNU GnuTLS=1.0.22
GNU GnuTLS=2.0.2
GNU GnuTLS=2.3.0
GNU GnuTLS=1.6.2
GNU GnuTLS=2.2.3
GNU GnuTLS=1.4.4
GNU GnuTLS=1.1.17
GNU GnuTLS=1.3.3

Event History

May 21, 2008
CVE Published
via MITRE·10:00 AM
Data Sourced
via MITRE·10:00 AM
Description

Frequently Asked Questions

1

What is the severity of CVE-2008-1950?

The severity of CVE-2008-1950 is considered medium due to the potential for denial of service.

2

How do I fix CVE-2008-1950?

To fix CVE-2008-1950, you should upgrade to GnuTLS version 2.2.4 or later.

3

What types of systems are affected by CVE-2008-1950?

CVE-2008-1950 affects various versions of GnuTLS, including versions from 1.0.0 to 2.3.5.

4

What vulnerabilities does CVE-2008-1950 exploit?

CVE-2008-1950 exploits an integer signedness error resulting in buffer over-read.

5

Can CVE-2008-1950 be exploited remotely?

Yes, CVE-2008-1950 can be exploited remotely by sending specially crafted Client Hello messages.

Contact

SecAlerts Pty Ltd.
132 Wickham Terrace
Fortitude Valley,
QLD 4006, Australia
info@secalerts.co
By using SecAlerts services, you agree to our services end-user license agreement. This website is safeguarded by reCAPTCHA and governed by the Google Privacy Policy and Terms of Service. All names, logos, and brands of products are owned by their respective owners, and any usage of these names, logos, and brands for identification purposes only does not imply endorsement. If you possess any content that requires removal, please get in touch with us.
© 2026 SecAlerts Pty Ltd.
ABN: 70 645 966 203, ACN: 645 966 203