CVE-2015-8313
First published: Fri Dec 20 2019(Updated: )
GnuTLS incorrectly validates the first byte of padding in CBC modes
Credit: cve@mitre.org
| Affected Software | Affected Version | How to fix |
|---|---|---|
| GNU GnuTLS | >=2.0.0<=2.12.24 | |
| Debian Debian Linux | =7.0 | |
| Debian Debian Linux | =8.0 | |
| Debian Debian Linux | =9.0 | |
| Debian Debian Linux | =10.0 | |
| debian/gnutls28 | 3.7.1-5+deb11u5 3.7.1-5+deb11u3 3.7.9-2+deb12u3 3.8.6-2 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
- https://blog.hboeck.de/archives/877-A-little-POODLE-left-in-GnuTLS-old-versions.html
- https://security-tracker.debian.org/tracker/CVE-2015-8313
- http://www.debian.org/security/2015/dsa-3408
- http://www.securityfocus.com/archive/1/537012/100/0/threaded
- http://www.securityfocus.com/bid/78327
- https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2015-8313
- https://bugzilla.suse.com/show_bug.cgi?id=CVE-2015-8313
Frequently Asked Questions
What is the vulnerability ID for this GnuTLS vulnerability?
The vulnerability ID for this GnuTLS vulnerability is CVE-2015-8313.
What is the severity of CVE-2015-8313?
The severity of CVE-2015-8313 is medium with a severity value of 5.9.
What software is affected by CVE-2015-8313?
The software affected by CVE-2015-8313 includes GnuTLS versions 2.0.0 to 2.12.24, Debian Debian Linux versions 7.0 to 10.0, and the package gnutls28 with specific versions 3.6.7-4+deb10u8, 3.6.7-4+deb10u10, 3.7.1-5+deb11u3, 3.7.9-2, and 3.8.1-4.
How does CVE-2015-8313 affect GnuTLS?
CVE-2015-8313 affects GnuTLS by incorrectly validating the first byte of padding in CBC modes.
What is the Common Weakness Enumeration (CWE) ID for CVE-2015-8313?
The Common Weakness Enumeration (CWE) ID for CVE-2015-8313 is 203.
- agent/type
- collector/nvd-index
- agent/software-canonical-lookup-request
- agent/author
- agent/remedy
- agent/references
- agent/weakness
- agent/severity
- agent/softwarecombine
- agent/description
- collector/mitre-cve
- source/MITRE
- agent/last-modified-date
- agent/first-publish-date
- agent/tags
- agent/event
- collector/security-tracker-debian
- source/Debian
- agent/software-canonical-lookup
- vendor/gnu
- canonical/gnu gnutls
- version/gnu gnutls/2.0.0
- version/gnu gnutls/2.12.24
- vendor/debian
- canonical/debian debian linux
- version/debian debian linux/7.0
- version/debian debian linux/8.0
- version/debian debian linux/9.0
- version/debian debian linux/10.0
- package-manager/debian