mirror of
https://github.com/CVEProject/cvelist.git
synced 2025-07-29 05:56:59 +00:00
223 lines
7.3 KiB
JSON
223 lines
7.3 KiB
JSON
{
|
|
"CVE_data_meta" : {
|
|
"ASSIGNER" : "cve@mitre.org",
|
|
"ID" : "CVE-2014-3466",
|
|
"STATE" : "PUBLIC"
|
|
},
|
|
"affects" : {
|
|
"vendor" : {
|
|
"vendor_data" : [
|
|
{
|
|
"product" : {
|
|
"product_data" : [
|
|
{
|
|
"product_name" : "n/a",
|
|
"version" : {
|
|
"version_data" : [
|
|
{
|
|
"version_value" : "n/a"
|
|
}
|
|
]
|
|
}
|
|
}
|
|
]
|
|
},
|
|
"vendor_name" : "n/a"
|
|
}
|
|
]
|
|
}
|
|
},
|
|
"data_format" : "MITRE",
|
|
"data_type" : "CVE",
|
|
"data_version" : "4.0",
|
|
"description" : {
|
|
"description_data" : [
|
|
{
|
|
"lang" : "eng",
|
|
"value" : "Buffer overflow in the read_server_hello function in lib/gnutls_handshake.c in GnuTLS before 3.1.25, 3.2.x before 3.2.15, and 3.3.x before 3.3.4 allows remote servers to cause a denial of service (memory corruption) or possibly execute arbitrary code via a long session id in a ServerHello message."
|
|
}
|
|
]
|
|
},
|
|
"problemtype" : {
|
|
"problemtype_data" : [
|
|
{
|
|
"description" : [
|
|
{
|
|
"lang" : "eng",
|
|
"value" : "n/a"
|
|
}
|
|
]
|
|
}
|
|
]
|
|
},
|
|
"references" : {
|
|
"reference_data" : [
|
|
{
|
|
"name" : "http://radare.today/technical-analysis-of-the-gnutls-hello-vulnerability/",
|
|
"refsource" : "MISC",
|
|
"url" : "http://radare.today/technical-analysis-of-the-gnutls-hello-vulnerability/"
|
|
},
|
|
{
|
|
"name" : "http://www.gnutls.org/security.html",
|
|
"refsource" : "CONFIRM",
|
|
"url" : "http://www.gnutls.org/security.html"
|
|
},
|
|
{
|
|
"name" : "https://bugzilla.redhat.com/show_bug.cgi?id=1101932",
|
|
"refsource" : "CONFIRM",
|
|
"url" : "https://bugzilla.redhat.com/show_bug.cgi?id=1101932"
|
|
},
|
|
{
|
|
"name" : "https://www.gitorious.org/gnutls/gnutls/commit/688ea6428a432c39203d00acd1af0e7684e5ddfd",
|
|
"refsource" : "CONFIRM",
|
|
"url" : "https://www.gitorious.org/gnutls/gnutls/commit/688ea6428a432c39203d00acd1af0e7684e5ddfd"
|
|
},
|
|
{
|
|
"name" : "http://linux.oracle.com/errata/ELSA-2014-0595.html",
|
|
"refsource" : "CONFIRM",
|
|
"url" : "http://linux.oracle.com/errata/ELSA-2014-0595.html"
|
|
},
|
|
{
|
|
"name" : "http://linux.oracle.com/errata/ELSA-2014-0594.html",
|
|
"refsource" : "CONFIRM",
|
|
"url" : "http://linux.oracle.com/errata/ELSA-2014-0594.html"
|
|
},
|
|
{
|
|
"name" : "http://www-01.ibm.com/support/docview.wss?uid=swg21678776",
|
|
"refsource" : "CONFIRM",
|
|
"url" : "http://www-01.ibm.com/support/docview.wss?uid=swg21678776"
|
|
},
|
|
{
|
|
"name" : "http://www-947.ibm.com/support/entry/portal/docdisplay?lndocid=MIGR-5096155",
|
|
"refsource" : "CONFIRM",
|
|
"url" : "http://www-947.ibm.com/support/entry/portal/docdisplay?lndocid=MIGR-5096155"
|
|
},
|
|
{
|
|
"name" : "http://www.novell.com/support/kb/doc.php?id=7015302",
|
|
"refsource" : "CONFIRM",
|
|
"url" : "http://www.novell.com/support/kb/doc.php?id=7015302"
|
|
},
|
|
{
|
|
"name" : "http://www.novell.com/support/kb/doc.php?id=7015303",
|
|
"refsource" : "CONFIRM",
|
|
"url" : "http://www.novell.com/support/kb/doc.php?id=7015303"
|
|
},
|
|
{
|
|
"name" : "DSA-2944",
|
|
"refsource" : "DEBIAN",
|
|
"url" : "http://www.debian.org/security/2014/dsa-2944"
|
|
},
|
|
{
|
|
"name" : "RHSA-2014:0594",
|
|
"refsource" : "REDHAT",
|
|
"url" : "http://rhn.redhat.com/errata/RHSA-2014-0594.html"
|
|
},
|
|
{
|
|
"name" : "RHSA-2014:0815",
|
|
"refsource" : "REDHAT",
|
|
"url" : "http://rhn.redhat.com/errata/RHSA-2014-0815.html"
|
|
},
|
|
{
|
|
"name" : "RHSA-2014:0595",
|
|
"refsource" : "REDHAT",
|
|
"url" : "http://rhn.redhat.com/errata/RHSA-2014-0595.html"
|
|
},
|
|
{
|
|
"name" : "RHSA-2014:0684",
|
|
"refsource" : "REDHAT",
|
|
"url" : "http://rhn.redhat.com/errata/RHSA-2014-0684.html"
|
|
},
|
|
{
|
|
"name" : "openSUSE-SU-2014:0763",
|
|
"refsource" : "SUSE",
|
|
"url" : "http://lists.opensuse.org/opensuse-security-announce/2014-06/msg00007.html"
|
|
},
|
|
{
|
|
"name" : "openSUSE-SU-2014:0767",
|
|
"refsource" : "SUSE",
|
|
"url" : "http://lists.opensuse.org/opensuse-security-announce/2014-06/msg00010.html"
|
|
},
|
|
{
|
|
"name" : "SUSE-SU-2014:0758",
|
|
"refsource" : "SUSE",
|
|
"url" : "http://lists.opensuse.org/opensuse-security-announce/2014-06/msg00002.html"
|
|
},
|
|
{
|
|
"name" : "SUSE-SU-2014:0788",
|
|
"refsource" : "SUSE",
|
|
"url" : "http://lists.opensuse.org/opensuse-security-announce/2014-06/msg00015.html"
|
|
},
|
|
{
|
|
"name" : "USN-2229-1",
|
|
"refsource" : "UBUNTU",
|
|
"url" : "http://www.ubuntu.com/usn/USN-2229-1"
|
|
},
|
|
{
|
|
"name" : "67741",
|
|
"refsource" : "BID",
|
|
"url" : "http://www.securityfocus.com/bid/67741"
|
|
},
|
|
{
|
|
"name" : "1030314",
|
|
"refsource" : "SECTRACK",
|
|
"url" : "http://www.securitytracker.com/id/1030314"
|
|
},
|
|
{
|
|
"name" : "58340",
|
|
"refsource" : "SECUNIA",
|
|
"url" : "http://secunia.com/advisories/58340"
|
|
},
|
|
{
|
|
"name" : "58598",
|
|
"refsource" : "SECUNIA",
|
|
"url" : "http://secunia.com/advisories/58598"
|
|
},
|
|
{
|
|
"name" : "58601",
|
|
"refsource" : "SECUNIA",
|
|
"url" : "http://secunia.com/advisories/58601"
|
|
},
|
|
{
|
|
"name" : "58642",
|
|
"refsource" : "SECUNIA",
|
|
"url" : "http://secunia.com/advisories/58642"
|
|
},
|
|
{
|
|
"name" : "59016",
|
|
"refsource" : "SECUNIA",
|
|
"url" : "http://secunia.com/advisories/59016"
|
|
},
|
|
{
|
|
"name" : "59057",
|
|
"refsource" : "SECUNIA",
|
|
"url" : "http://secunia.com/advisories/59057"
|
|
},
|
|
{
|
|
"name" : "59086",
|
|
"refsource" : "SECUNIA",
|
|
"url" : "http://secunia.com/advisories/59086"
|
|
},
|
|
{
|
|
"name" : "59021",
|
|
"refsource" : "SECUNIA",
|
|
"url" : "http://secunia.com/advisories/59021"
|
|
},
|
|
{
|
|
"name" : "59838",
|
|
"refsource" : "SECUNIA",
|
|
"url" : "http://secunia.com/advisories/59838"
|
|
},
|
|
{
|
|
"name" : "60384",
|
|
"refsource" : "SECUNIA",
|
|
"url" : "http://secunia.com/advisories/60384"
|
|
},
|
|
{
|
|
"name" : "59408",
|
|
"refsource" : "SECUNIA",
|
|
"url" : "http://secunia.com/advisories/59408"
|
|
}
|
|
]
|
|
}
|
|
}
|