high7.5Public exploit code
CVE-2012-1663
Double free vulnerability in libgnutls in GnuTLS before 3.0.14 allows remote attackers to cause a denial of service (application crash) or possibly have unspec…
Public exploit code
Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.
- GnuTLS libgnutls - Double-Free Certificate List Parsing Remote Denial of Service2013-03-22 · dos · linux
Impact
Double free vulnerability in libgnutls in GnuTLS before 3.0.14 allows remote attackers to cause a denial of service (application crash) or possibly have unspecified other impact via a crafted certificate list.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Gnu | Gnutls | through 3.0.13 Versions 1.0.16, 1.0.17, 1.0.18, 1.0.19, 1.0.20 |
Weakness classification
References
- NVD record
- CVE.org record
- http://article.gmane.org/gmane.comp.encryption.gpg.gnutls.devel/5866
- http://www.exploit-db.com/exploits/24865
- https://exchange.xforce.ibmcloud.com/vulnerabilities/74099
- http://article.gmane.org/gmane.comp.encryption.gpg.gnutls.devel/5866
- http://www.exploit-db.com/exploits/24865
- https://exchange.xforce.ibmcloud.com/vulnerabilities/74099