What is the severity of CVE-2014-8155?

CVE-2014-8155 is classified as a medium severity vulnerability due to the potential for man-in-the-middle attacks.

How do I fix CVE-2014-8155?

To fix CVE-2014-8155, upgrade GnuTLS to version 2.9.10 or later.

What exploit does CVE-2014-8155 enable?

CVE-2014-8155 allows attackers to spoof servers by using certificates from CA certificates that are not yet valid or have expired.

Which versions of GnuTLS are affected by CVE-2014-8155?

CVE-2014-8155 affects GnuTLS versions prior to 2.9.10.

What impact does CVE-2014-8155 have on server communication?

CVE-2014-8155 compromises the integrity of server communication by allowing unauthenticated access via invalid certificates.

Vulnerability/
CVE-2014-8155

medium

4.3

CWE

14/8/2015

6/8/2024

CVE-2014-8155

First published: Fri Aug 14 2015(Updated: )

GnuTLS before 2.9.10 does not verify the activation and expiration dates of CA certificates, which allows man-in-the-middle attackers to spoof servers via a certificate issued by a CA certificate that is (1) not yet valid or (2) no longer valid.

Credit: secalert@redhat.com

Affected Software	Affected Version	How to fix
GNU GnuTLS	<=2.9.9

Never miss a vulnerability like this again

Reference Links

Frequently Asked Questions

What is the severity of CVE-2014-8155?
CVE-2014-8155 is classified as a medium severity vulnerability due to the potential for man-in-the-middle attacks.
How do I fix CVE-2014-8155?
To fix CVE-2014-8155, upgrade GnuTLS to version 2.9.10 or later.
What exploit does CVE-2014-8155 enable?
CVE-2014-8155 allows attackers to spoof servers by using certificates from CA certificates that are not yet valid or have expired.
Which versions of GnuTLS are affected by CVE-2014-8155?
CVE-2014-8155 affects GnuTLS versions prior to 2.9.10.
What impact does CVE-2014-8155 have on server communication?
CVE-2014-8155 compromises the integrity of server communication by allowing unauthenticated access via invalid certificates.

agent/references
agent/type
agent/author
agent/weakness
agent/severity
agent/softwarecombine
agent/description
collector/mitre-cve
source/MITRE
agent/last-modified-date
agent/tags
agent/first-publish-date
agent/event
collector/nvd-index
agent/software-canonical-lookup-request
agent/source
vendor/gnu
canonical/gnu gnutls
version/gnu gnutls/2.9.9

Company

Resources

Contact

SecAlerts Pty Ltd.
132 Wickham Terrace
Fortitude Valley,
QLD 4006, Australia
info@secalerts.co

By using SecAlerts services, you agree to our services end-user license agreement. This website is safeguarded by reCAPTCHA and governed by the Google Privacy Policy and Terms of Service. All names, logos, and brands of products are owned by their respective owners, and any usage of these names, logos, and brands for identification purposes only does not imply endorsement. If you possess any content that requires removal, please get in touch with us.

Frequently Asked Questions

What is the severity of CVE-2014-8155?
CVE-2014-8155 is classified as a medium severity vulnerability due to the potential for man-in-the-middle attacks.
How do I fix CVE-2014-8155?
To fix CVE-2014-8155, upgrade GnuTLS to version 2.9.10 or later.
What exploit does CVE-2014-8155 enable?
CVE-2014-8155 allows attackers to spoof servers by using certificates from CA certificates that are not yet valid or have expired.
Which versions of GnuTLS are affected by CVE-2014-8155?
CVE-2014-8155 affects GnuTLS versions prior to 2.9.10.
What impact does CVE-2014-8155 have on server communication?
CVE-2014-8155 compromises the integrity of server communication by allowing unauthenticated access via invalid certificates.