Buffer overflow in GNU Gnutls

CVE-2013-4466

Buffer overflow in the dane_query_tlsa function in the DANE library (libdane) in GnuTLS 3.1.x before 3.1.15 and 3.2.x before 3.2.5 allows remote servers to cause a denial of service (memory corruption) via a response with more than four DANE entries.

Vulnerability class: Buffer Overflow

EPSS: 0.020 (78.4th percentile) — read the EPSS interpretation.

Affected products

  • Gnu Gnutls — versions 3.1.0, 3.1.1, 3.1.2
  • N/a — versions n/a

Weakness classification (CWE)

References