CVE-2011-4128

gnutls: buffer overflow in gnutls_session_get_data() (GNUTLS-SA-2011-2)

Published Dec 8, 2011 CVSS 2.0 · 4.3 Medium EPSS 2.3% KEV · Not listed
Description
Buffer overflow in the gnutls_session_get_data function in lib/gnutls_session.c in GnuTLS 2.12.x before 2.12.14 and 3.x before 3.0.7, when used on a client that performs nonstandard session resumption, allows remote TLS servers to cause a denial of service (application crash) via a large SessionTicket.

Remediation

No solution or workaround provided in the CVE record

Tracking

Sign in to view the affected projects.

Advisories

Source ID Title
EUVD EUVD EUVD-2011-4076 Buffer overflow in the gnutls_session_get_data function in lib/gnutls_session.c in GnuTLS 2.12.x before 2.12.14 and 3.x before 3.0.7, when used on a client that performs nonstandard session resumption, allows remote TLS servers to cause a denial of service (application crash) via a large SessionTicket.
Ubuntu USN Ubuntu USN USN-1418-1 GnuTLS vulnerabilities
History

No history.

Weaknesses

Sources

Status
PUBLISHED
Assigner
redhat
Published
Updated
Aug 7, 2024, 12:01 AM
Reserved
Oct 18, 2011, 12:00 AM
Status
Modified
Published
Dec 8, 2011, 8:55 PM
Modified
Jun 16, 2026, 11:34 PM
Severity
Low
Public date
Nov 7, 2011, 12:00 AM