Audit Linux privileges now to limit compromise, escalation, and system-wide damage. Review Linux Privileges×

Alerts This Week
Warning Icon 1 438
Alerts This Week
Warning Icon 1 438

SUSE 11 SP3: SUSE-SU-2014:0758-1 Important: GnuTLS Memory Corruption

suse
Calendar Grey June 5, 2014
Scroller Suse
SUSE Security Patch for gnutls tackles severe vulnerabilities. Essential updates maintain system reliability and safety.
An update that solves one vulnerability and has one errata An update that solves one vulnerability and has one errata An update that solves one vulnerability and has one errata is ...

Summary

GnuTLS has been patched to ensure proper parsing of session ids during the TLS/SSL handshake. Additionally, three issues inherited from libtasn1 have been fixed. Further information is available at http://www.gnutls.org/security.html#GNUTLS-SA-2014-3 These security issues have been fixed: * Possible memory corruption during connect (CVE-2014-3466) * Multiple boundary check issues could allow DoS (CVE-2014-3467) * asn1_get_bit_der() can return negative bit length (CVE-2014-3468) * Possible DoS by NULL pointer dereference (CVE-2014-3469) Security Issue references: * CVE-2014-3466 Patch Instructions:

Topics%20covered

Topics Covered

security advisory update DoS memory corruption important SUSE gnutls

References

#880730 #880910

Cross- CVE-2014-3466

Affected Products:

SUSE Linux Enterprise Software Development Kit 11 SP3

SUSE Linux Enterprise Server 11 SP3 for VMware

SUSE Linux Enterprise Server 11 SP3

SUSE Linux Enterprise High Availability Extension 11 SP3

SUSE Linux Enterprise Desktop 11 SP3

https://www.suse.com/security/cve/CVE-2014-3466.html

https://scc.suse.com:443/patches/

Severity
important
Lowest
Low
Medium
High
Critical

Announcement ID: SUSE-SU-2014:0758-1
Rating: important

Topics%20covered

Topics Covered

security advisory update DoS memory corruption important SUSE gnutls

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.