CVE-2015-8313
First published: Fri Dec 20 2019(Updated: )
GnuTLS incorrectly validates the first byte of padding in CBC modes
Credit: cve@mitre.org
| Affected Software | Affected Version | How to fix |
|---|---|---|
| Gnu Gnutls | >=2.0.0<=2.12.24 | |
| Debian Debian Linux | =7.0 | |
| Debian Debian Linux | =8.0 | |
| Debian Debian Linux | =9.0 | |
| Debian Debian Linux | =10.0 | |
| debian/gnutls28 | 3.6.7-4+deb10u8 3.6.7-4+deb10u10 3.7.1-5+deb11u3 3.7.9-2 3.8.1-4 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
- http://www.debian.org/security/2015/dsa-3408
- http://www.securityfocus.com/archive/1/537012/100/0/threaded
- http://www.securityfocus.com/bid/78327
- https://blog.hboeck.de/archives/877-A-little-POODLE-left-in-GnuTLS-old-versions.html
- https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2015-8313
- https://bugzilla.suse.com/show_bug.cgi?id=CVE-2015-8313
- https://security-tracker.debian.org/tracker/CVE-2015-8313
Frequently Asked Questions
What is the vulnerability ID for this GnuTLS vulnerability?
The vulnerability ID for this GnuTLS vulnerability is CVE-2015-8313.
What is the severity of CVE-2015-8313?
The severity of CVE-2015-8313 is medium with a severity value of 5.9.
What software is affected by CVE-2015-8313?
The software affected by CVE-2015-8313 includes GnuTLS versions 2.0.0 to 2.12.24, Debian Debian Linux versions 7.0 to 10.0, and the package gnutls28 with specific versions 3.6.7-4+deb10u8, 3.6.7-4+deb10u10, 3.7.1-5+deb11u3, 3.7.9-2, and 3.8.1-4.
How does CVE-2015-8313 affect GnuTLS?
CVE-2015-8313 affects GnuTLS by incorrectly validating the first byte of padding in CBC modes.
What is the Common Weakness Enumeration (CWE) ID for CVE-2015-8313?
The Common Weakness Enumeration (CWE) ID for CVE-2015-8313 is 203.
- collector/nvd-index
- collector/security-tracker-debian
- vendor/gnu
- product/gnutls
- canonical/gnu gnutls
- vendor/debian
- product/debian linux
- canonical/debian debian linux
- package-manager/debian