https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Sat, 03 Oct 2026 07:18:03 +0000 https://cve.radiocsirt.org/vuln/bdu:2015-04152 bdu:2015-04152 https://cve.radiocsirt.org/vuln/bdu:2015-04152 https://cve.radiocsirt.org/vuln/bell-cve-2008-1948 <p><strong>Withdrawn by the publisher.</strong></p> <p><strong>Withdrawn by the publisher.</strong></p> https://cve.radiocsirt.org/vuln/bell-cve-2008-1948 https://cve.radiocsirt.org/vuln/certa-2008-avi-262 certa-2008-avi-262 https://cve.radiocsirt.org/vuln/certa-2008-avi-262 https://cve.radiocsirt.org/vuln/euvd-2026-127147 EUVD-2026-127147 https://cve.radiocsirt.org/vuln/euvd-2026-127147 https://cve.radiocsirt.org/vuln/fkie_cve-2008-1948 <p>The _gnutls_server_name_recv_params function in lib/ext_server_name.c in libgnutls in gnutls-serv in GnuTLS before 2.2.4 does not properly calculate the number of Server Names in a TLS 1.0 Client Hello message during extension handling, which allows remote attackers to cause a denial of service (crash) or possibly execute arbitrary code via a zero value for the length of Server Names, which leads to a buffer overflow in session resumption data in the pack_security_parameters function, aka GNUTLS-SA-2008-1-1.</p> <p>The _gnutls_server_name_recv_params function in lib/ext_server_name.c in libgnutls in gnutls-serv in GnuTLS before 2.2.4 does not properly calculate the number of Server Names in a TLS 1.0 Client Hello message during extension handling, which allows remote attackers to cause a denial of service (crash) or possibly execute arbitrary code via a zero value for the length of Server Names, which leads to a buffer overflow in session resumption data in the pack_security_parameters function, aka GNUTLS-SA-2008-1-1.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2008-1948 https://cve.radiocsirt.org/vuln/ghsa-pc6g-9pg3-9q52 <p>The _gnutls_server_name_recv_params function in lib/ext_server_name.c in libgnutls in gnutls-serv in GnuTLS before 2.2.4 does not properly calculate the number of Server Names in a TLS 1.0 Client Hello message during extension handling, which allows remote attackers to cause a denial of service (crash) or possibly execute arbitrary code via a zero value for the length of Server Names, which leads to a buffer overflow in session resumption data in the pack_security_parameters function, aka GNUTLS-SA-2008-1-1.</p> <p>The _gnutls_server_name_recv_params function in lib/ext_server_name.c in libgnutls in gnutls-serv in GnuTLS before 2.2.4 does not properly calculate the number of Server Names in a TLS 1.0 Client Hello message during extension handling, which allows remote attackers to cause a denial of service (crash) or possibly execute arbitrary code via a zero value for the length of Server Names, which leads to a buffer overflow in session resumption data in the pack_security_parameters function, aka GNUTLS-SA-2008-1-1.</p> https://cve.radiocsirt.org/vuln/ghsa-pc6g-9pg3-9q52 https://cve.radiocsirt.org/vuln/gsd-2008-1948 gsd-2008-1948 https://cve.radiocsirt.org/vuln/gsd-2008-1948 https://cve.radiocsirt.org/vuln/opensuse-su-2024:10801-1 <p>gnutls-3.7.2-1.2 on GA media</p> <p>gnutls-3.7.2-1.2 on GA media</p> https://cve.radiocsirt.org/vuln/opensuse-su-2024:10801-1 https://cve.radiocsirt.org/vuln/rhsa-2008:0489 <p>GNUTLS-SA-2008-1-1 GnuTLS buffer overflow GNUTLS-SA-2008-1-2 GnuTLS null-pointer dereference GNUTLS-SA-2008-1-3 GnuTLS memory overread flaw</p> <p>GNUTLS-SA-2008-1-1 GnuTLS buffer overflow GNUTLS-SA-2008-1-2 GnuTLS null-pointer dereference GNUTLS-SA-2008-1-3 GnuTLS memory overread flaw</p> https://cve.radiocsirt.org/vuln/rhsa-2008:0489