CVE-2014-3465: Null Pointer Dereference

Q: What is the severity of CVE-2014-3465?

CVE-2014-3465 is classified as a medium severity vulnerability due to the potential for a NULL pointer dereference.

Q: How do I fix CVE-2014-3465?

To fix CVE-2014-3465, upgrade to GnuTLS versions 3.1.20 or 3.2.10 or later.

Q: Which versions of GnuTLS are affected by CVE-2014-3465?

CVE-2014-3465 affects GnuTLS versions prior to 3.1.20 and 3.2.10.

Q: What are the implications of the vulnerability CVE-2014-3465?

The implications of CVE-2014-3465 include potential crashes or unexpected behavior in applications using GnuTLS when handling certain X.509 certificates.

Q: Who discovered CVE-2014-3465?

CVE-2014-3465 was reported by the GnuTLS development community.

Published May 27, 2014

Updated

A NULL pointer dereference flaw was discovered in GnuTLS's gnutlsx509dnoidname(). The function, when called with the GNUTLSX509DNOIDRETURNOID flag, should not return NULL to its caller. However, it could previously return NULL when parsed X.509 certificates included specific OIDs.

The issue was corrected upstream using the following commit: https://www.gitorious.org/gnutls/gnutls/commit/d3648ebb04b650e6d20a2ec1fb839256b30b9fc6

The fix was first included in upstream versions 3.1.20 and 3.2.10: http://thread.gmane.org/gmane.comp.encryption.gpg.gnutls.devel/7251 http://thread.gmane.org/gmane.comp.encryption.gpg.gnutls.devel/7250

Affected function was introduced in GnuTLS version 3.0: http://gnutls.org/manual/htmlnode/X509-certificate-API.html#gnutls005fx509005fdn005foid005fname-1

The gnutls packages in Red Hat Enterprise Linux 6 and earlier include GnuTLS versions 2.x or 1.x and were therefore not affected by this issue. The gnutls and mingw-gnutls packages in Fedora are already updated to the fixed upstream version.

Other sources

The gnutlsx509dnoidname function in lib/x509/common.c in GnuTLS 3.0 before 3.1.20 and 3.2.x before 3.2.10 allows remote attackers to cause a denial of service (NULL pointer dereference) via a crafted X.509 certificate, related to a missing LDAP description for an OID when printing the DN.

— MITRE

Affected Software

62 affected componentsFixes available

redhat/gnutls<3.1.20

3.1.20

redhat/gnutls<3.2.10

3.2.10

GNU GnuTLS=3.0.0

GNU GnuTLS=3.0.1

GNU GnuTLS=3.0.2

GNU GnuTLS=3.0.3

GNU GnuTLS=3.0.4

GNU GnuTLS=3.0.5

GNU GnuTLS=3.0.6

GNU GnuTLS=3.0.7

GNU GnuTLS=3.0.8

GNU GnuTLS=3.0.9

GNU GnuTLS=3.0.10

GNU GnuTLS=3.0.11

GNU GnuTLS=3.0.12

GNU GnuTLS=3.0.13

GNU GnuTLS=3.0.14

GNU GnuTLS=3.0.15

GNU GnuTLS=3.0.16

GNU GnuTLS=3.0.17

GNU GnuTLS=3.0.18

GNU GnuTLS=3.0.19

GNU GnuTLS=3.0.20

GNU GnuTLS=3.0.21

GNU GnuTLS=3.0.22

GNU GnuTLS=3.0.23

GNU GnuTLS=3.0.24

GNU GnuTLS=3.0.25

GNU GnuTLS=3.0.26

GNU GnuTLS=3.0.27

GNU GnuTLS=3.0.28

GNU GnuTLS=3.1.0

GNU GnuTLS=3.1.1

GNU GnuTLS=3.1.2

GNU GnuTLS=3.1.3

GNU GnuTLS=3.1.4

GNU GnuTLS=3.1.5

GNU GnuTLS=3.1.6

GNU GnuTLS=3.1.7

GNU GnuTLS=3.1.8

GNU GnuTLS=3.1.9

GNU GnuTLS=3.1.10

GNU GnuTLS=3.1.11

GNU GnuTLS=3.1.12

GNU GnuTLS=3.1.13

GNU GnuTLS=3.1.14

GNU GnuTLS=3.1.15

GNU GnuTLS=3.1.16

GNU GnuTLS=3.1.17

GNU GnuTLS=3.1.18

GNU GnuTLS=3.1.19

GNU GnuTLS=3.2.0

GNU GnuTLS=3.2.1

GNU GnuTLS=3.2.2

GNU GnuTLS=3.2.3

GNU GnuTLS=3.2.4

GNU GnuTLS=3.2.5

GNU GnuTLS=3.2.6

GNU GnuTLS=3.2.7

GNU GnuTLS=3.2.8

GNU GnuTLS=3.2.8.1

GNU GnuTLS=3.2.9

Event History

Jun 10, 2014

CVE Published

via MITRE·02:00 PM

Data Sourced

via MITRE·02:00 PM

Description

Data Sourced

via NVD·02:55 PM

DescriptionSeverityAffected Software

Frequently Asked Questions

What is the severity of CVE-2014-3465?

CVE-2014-3465 is classified as a medium severity vulnerability due to the potential for a NULL pointer dereference.

How do I fix CVE-2014-3465?

To fix CVE-2014-3465, upgrade to GnuTLS versions 3.1.20 or 3.2.10 or later.

Which versions of GnuTLS are affected by CVE-2014-3465?

CVE-2014-3465 affects GnuTLS versions prior to 3.1.20 and 3.2.10.

What are the implications of the vulnerability CVE-2014-3465?