GNUTLS Padding拒绝服务漏洞

漏洞信息详情

GNUTLS Padding拒绝服务漏洞

• CNNVD编号：CNNVD-200505-874
• 危害等级： 中危
  
  
• CVE编号：
  CVE-2005-1431
  
• 漏洞类型：
  
  
  其他
  
• 发布时间：
  
  2005-05-03
  
• 威胁类型：
  
  
  远程
  
• 更新时间：
  
  2005-10-20
  
• 厂        商：
  
  gnu
• 漏洞来源：
  The individual or …

GnuTLS 1.2的1.2.3之前版本和1.0的1.0.25之前版本中的\”记录包解析\”使得远程攻击者可以发起拒绝服务攻击，可能与gnutils_cipher.c中的填充字节有关。

目前厂商已经发布了升级补丁以修复这个安全问题，补丁下载链接：

GNU GnuTLS 1.0

GNU gnutls-1.0.25.tar.gz

ftp://ftp.gnutls.org/pub/gnutls/gnutls-1.0.25.tar.gz

GNU GnuTLS 1.0.1

GNU gnutls-1.0.25.tar.gz

ftp://ftp.gnutls.org/pub/gnutls/gnutls-1.0.25.tar.gz

GNU GnuTLS 1.0.14

GNU gnutls-1.0.25.tar.gz

ftp://ftp.gnutls.org/pub/gnutls/gnutls-1.0.25.tar.gz

GNU GnuTLS 1.0.15

GNU gnutls-1.0.25.tar.gz

ftp://ftp.gnutls.org/pub/gnutls/gnutls-1.0.25.tar.gz

GNU GnuTLS 1.0.16

GNU gnutls-1.0.25.tar.gz

ftp://ftp.gnutls.org/pub/gnutls/gnutls-1.0.25.tar.gz

Ubuntu gnutls-bin_1.0.16-13ubuntu0.1_amd64.deb

Ubuntu 5.04 (Hoary Hedgehog)

http://security.ubuntu.com/ubuntu/pool/universe/g/gnutls11/gnutls-bin_ 1.0.16-13ubuntu0.1_amd64.deb

Ubuntu gnutls-bin_1.0.16-13ubuntu0.1_i386.deb

Ubuntu 5.04 (Hoary Hedgehog)

http://security.ubuntu.com/ubuntu/pool/universe/g/gnutls11/gnutls-bin_ 1.0.16-13ubuntu0.1_i386.deb

Ubuntu gnutls-bin_1.0.16-13ubuntu0.1_ia64.deb

Ubuntu 5.04 (Hoary Hedgehog)

http://security.ubuntu.com/ubuntu/pool/universe/g/gnutls11/gnutls-bin_ 1.0.16-13ubuntu0.1_ia64.deb

Ubuntu gnutls-bin_1.0.16-13ubuntu0.1_powerpc.deb

Ubuntu 5.04 (Hoary Hedgehog)

http://security.ubuntu.com/ubuntu/pool/universe/g/gnutls11/gnutls-bin_ 1.0.16-13ubuntu0.1_powerpc.deb

Ubuntu libgnutls11-dbg_1.0.16-13ubuntu0.1_amd64.deb

Ubuntu 5.04 (Hoary Hedgehog)

http://security.ubuntu.com/ubuntu/pool/universe/g/gnutls11/libgnutls11 -dbg_1.0.16-13ubuntu0.1_amd64.deb

Ubuntu libgnutls11-dbg_1.0.16-13ubuntu0.1_i386.deb

Ubuntu 5.04 (Hoary Hedgehog)

http://security.ubuntu.com/ubuntu/pool/universe/g/gnutls11/libgnutls11 -dbg_1.0.16-13ubuntu0.1_i386.deb

Ubuntu libgnutls11-dbg_1.0.16-13ubuntu0.1_ia64.deb

Ubuntu 5.04 (Hoary Hedgehog)

http://security.ubuntu.com/ubuntu/pool/universe/g/gnutls11/libgnutls11 -dbg_1.0.16-13ubuntu0.1_ia64.deb

Ubuntu libgnutls11-dbg_1.0.16-13ubuntu0.1_powerpc.deb

Ubuntu 5.04 (Hoary Hedgehog)

http://security.ubuntu.com/ubuntu/pool/universe/g/gnutls11/libgnutls11 -dbg_1.0.16-13ubuntu0.1_powerpc.deb

Ubuntu libgnutls11-dev_1.0.16-13ubuntu0.1_amd64.deb

Ubuntu 5.04 (Hoary Hedgehog)

http://security.ubuntu.com/ubuntu/pool/main/g/gnutls11/libgnutls11-dev _1.0.16-13ubuntu0.1_amd64.deb

Ubuntu libgnutls11-dev_1.0.16-13ubuntu0.1_i386.deb

Ubuntu 5.04 (Hoary Hedgehog)

http://security.ubuntu.com/ubuntu/pool/main/g/gnutls11/libgnutls11-dev _1.0.16-13ubuntu0.1_i386.deb

Ubuntu libgnutls11-dev_1.0.16-13ubuntu0.1_ia64.deb

Ubuntu 5.04 (Hoary Hedgehog)

http://security.ubuntu.com/ubuntu/pool/main/g/gnutls11/libgnutls11-dev _1.0.16-13ubuntu0.1_ia64.deb

Ubuntu libgnutls11-dev_1.0.16-13ubuntu0.1_powerpc.deb

Ubuntu 5.04 (Hoary Hedgehog)

http://security.ubuntu.com/ubuntu/pool/main/g/gnutls11/libgnutls11-dev _1.0.16-13ubuntu0.1_powerpc.deb

Ubuntu libgnutls11_1.0.16-13ubuntu0.1_amd64.deb

Ubuntu 5.04 (Hoary Hedgehog)

http://security.ubuntu.com/ubuntu/pool/main/g/gnutls11/libgnutls11_1.0 .16-13ubuntu0.1_amd64.deb

Ubuntu libgnutls11_1.0.16-13ubuntu0.1_i386.deb

Ubuntu 5.04 (Hoary Hedgehog)

http://security.ubuntu.com/ubuntu/pool/main/g/gnutls11/libgnutls11_1.0 .16-13ubuntu0.1_i386.deb

Ubuntu libgnutls11_1.0.16-13ubuntu0.1_ia64.deb

Ubuntu 5.04 (Hoary Hedgehog)

http://security.ubuntu.com/ubuntu/pool/main/g/gnutls11/libgnutls11_1.0 .16-13ubuntu0.1_ia64.deb

Ubuntu libgnutls11_1.0.16-13ubuntu0.1_powerpc.deb

Ubuntu 5.04 (Hoary Hedgehog)

http://security.ubuntu.com/ubuntu/pool/main/g/gnutls11/libgnutls11_1.0 .16-13ubuntu0.1_powerpc.deb

GNU GnuTLS 1.0.17

Fedora gnutls-1.0.20-3.1.1.i386.rpm

RedHat Fedora Core 3

http://download.fedora.redhat.com/pub/fedora/linux/core/updates/3/

Fedora gnutls-1.0.20-3.1.1.x86_64.rpm

RedHat Fedora Core 3

http://download.fedora.redhat.com/pub/fedora/linux/core/updates/3/

Fedora gnutls-debuginfo-1.0.20-3.1.1.i386.rpm

RedHat Fedora Core 3

http://download.fedora.redhat.com/pub/fedora/linux/core/updates/3/

Fedora gnutls-debuginfo-1.0.20-3.1.1.x86_64.rpm

RedHat Fedora Core 3

http://download.fedora.redhat.com/pub/fedora/linux/core/updates/3/

Fedora gnutls-devel-1.0.20-3.1.1.i386.rpm

RedHat Fedora Core 3

http://download.fedora.redhat.com/pub

来源: XF

名称: gnutls-record-parsing-dos(20328)

链接:http://xforce.iss.net/xforce/xfdb/20328

来源: BID

名称: 13477

链接:http://www.securityfocus.com/bid/13477

来源: OSVDB

名称: 16054

链接:http://www.osvdb.org/16054

来源: SECTRACK

名称: 1013861

链接:http://securitytracker.com/id?1013861

来源: SECUNIA

名称: 15193

链接:http://secunia.com/advisories/15193

来源: MLIST

名称: [gnutls-dev] 20050428 GnuTLS 1.2.3 and 1.0.25

链接:http://lists.gnupg.org/pipermail/gnutls-dev/2005-April/000858.html

来源: REDHAT

名称: RHSA-2005:430

链接:http://www.redhat.com/support/errata/RHSA-2005-430.html