The remote MiracleLinux 4 host has packages installed that are affected by multiple vulnerabilities as referenced in the AXSA:2012-458:01 advisory.

    GnuTLS is a project that aims to develop a library which provides a secure layer, over a reliable     transport layer. Currently the GnuTLS library implements the proposed standards by the IETF's TLS working     group.
    Security issues fixed with this release:
     CVE-2011-4128     Buffer overflow in the gnutls_session_get_data function in lib/gnutls_session.c in GnuTLS 2.12.x before     2.12.14 and 3.x before 3.0.7, when used on a client that performs nonstandard session resumption, allows     remote TLS servers to cause a denial of service (application crash) via a large SessionTicket.
     CVE-2012-1573     gnutls_cipher.c in libgnutls in GnuTLS before 2.12.17 and 3.x before 3.0.15 does not properly handle data     encrypted with a block cipher, which allows remote attackers to cause a denial of service (heap memory     corruption and application crash) via a crafted record, as demonstrated by a crafted GenericBlockCipher     structure.

Tenable has extracted the preceding description block directly from the MiracleLinux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

An updated rhev-hypervisor5 package that fixes three security issues and one bug is now available.

The Red Hat Security Response Team has rated this update as having important security impact. Common Vulnerability Scoring System (CVSS) base scores, which give detailed severity ratings, are available for each vulnerability from the CVE links in the References section.

The rhev-hypervisor5 package provides a Red Hat Enterprise Virtualization Hypervisor ISO disk image. The Red Hat Enterprise Virtualization Hypervisor is a dedicated Kernel-based Virtual Machine (KVM) hypervisor. It includes everything necessary to run and manage virtual machines: A subset of the Red Hat Enterprise Linux operating environment and the Red Hat Enterprise Virtualization Agent.

Note: Red Hat Enterprise Virtualization Hypervisor is only available for the Intel 64 and AMD64 architectures with virtualization extensions.

A flaw was found in the way libtasn1 decoded DER data. An attacker could create a carefully-crafted X.509 certificate that, when parsed by an application that uses GnuTLS, could cause the application to crash. (CVE-2012-1569)

A flaw was found in the way GnuTLS decrypted malformed TLS records.
This could cause a TLS/SSL client or server to crash when processing a specially crafted TLS record from a remote TLS/SSL connection peer.
(CVE-2012-1573)

An integer overflow flaw was found in the implementation of the printf functions family. This could allow an attacker to bypass FORTIFY_SOURCE protections and execute arbitrary code using a format string flaw in an application, even though these protections are expected to limit the impact of such flaws to an application abort.
(CVE-2012-0864)

Red Hat would like to thank Matthew Hall of Mu Dynamics for reporting CVE-2012-1569 and CVE-2012-1573.

This updated package provides updated components that include fixes for various security issues. These issues have no security impact on Red Hat Enterprise Virtualization Hypervisor itself, however. The security fixes included in this update address the following CVE numbers :

CVE-2011-4128 (gnutls issue)

CVE-2012-1583 (kernel issue)

CVE-2011-3045 (libpng issue)

CVE-2012-0884 and CVE-2012-1165 (openssl issues)

Further information on the changes made to the package is available on the relevant errata :

https://rhn.redhat.com/errata/RHBA-2012-0398.html

Users of Red Hat Enterprise Virtualization Hypervisor are advised to upgrade to this updated package, which fixes these issues.

New gnutls packages are available for Slackware 12.1, 12.2, 13.0, 13.1, and 13.37 to fix security issues.

A vulnerability has been found and corrected in GnuTLS :

gnutls_cipher.c in libgnutls in GnuTLS before 2.12.17 and 3.x before 3.0.15 does not properly handle data encrypted with a block cipher, which allows remote attackers to cause a denial of service (heap memory corruption and application crash) via a crafted record, as demonstrated by a crafted GenericBlockCipher structure (CVE-2012-1573).

The updated packages have been patched to correct this issue.

The GnuTLS packages for Mandriva Linux 2011 has been upgraded to the 2.12.8 version due to problems with the test suite while building it, additionally a new dependency was added on p11-kit for the PKCS #11 support.

Updated gnutls packages that fix two security issues are now available for Red Hat Enterprise Linux 6.

The Red Hat Security Response Team has rated this update as having important security impact. Common Vulnerability Scoring System (CVSS) base scores, which give detailed severity ratings, are available for each vulnerability from the CVE links in the References section.

The GnuTLS library provides support for cryptographic algorithms and for protocols such as Transport Layer Security (TLS).

A flaw was found in the way GnuTLS decrypted malformed TLS records.
This could cause a TLS/SSL client or server to crash when processing a specially crafted TLS record from a remote TLS/SSL connection peer.
(CVE-2012-1573)

A boundary error was found in the gnutls_session_get_data() function.
A malicious TLS/SSL server could use this flaw to crash a TLS/SSL client or, possibly, execute arbitrary code as the client, if the client passed a fixed-sized buffer to gnutls_session_get_data() before checking the real size of the session data provided by the server.
(CVE-2011-4128)

Red Hat would like to thank Matthew Hall of Mu Dynamics for reporting CVE-2012-1573.

Users of GnuTLS are advised to upgrade to these updated packages, which contain backported patches to correct these issues. For the update to take effect, all applications linked to the GnuTLS library must be restarted, or the system rebooted.

The remote Redhat Enterprise Linux 6 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2012:0531 advisory.

    The rhev-hypervisor6 package provides a Red Hat Enterprise Virtualization     Hypervisor ISO disk image. The Red Hat Enterprise Virtualization Hypervisor     is a dedicated Kernel-based Virtual Machine (KVM) hypervisor. It includes     everything necessary to run and manage virtual machines: A subset of the     Red Hat Enterprise Linux operating environment and the Red Hat Enterprise     Virtualization Agent.

    Note: Red Hat Enterprise Virtualization Hypervisor is only available for     the Intel 64 and AMD64 architectures with virtualization extensions.

    A flaw was found in the way libtasn1 decoded DER data. An attacker could     create carefully-crafted DER encoded input (such as an X.509 certificate)     that, when parsed by an application that uses libtasn1 (such as     applications using GnuTLS), could cause the application to crash.
    (CVE-2012-1569)

    A flaw was found in the way GnuTLS decrypted malformed TLS records. This     could cause a TLS/SSL client or server to crash when processing a     specially-crafted TLS record from a remote TLS/SSL connection peer.
    (CVE-2012-1573)

    An integer overflow flaw was found in the implementation of the printf     functions family. This could allow an attacker to bypass FORTIFY_SOURCE     protections and execute arbitrary code using a format string flaw in an     application, even though these protections are expected to limit the     impact of such flaws to an application abort. (CVE-2012-0864)

    Red Hat would like to thank Matthew Hall of Mu Dynamics for reporting     CVE-2012-1569 and CVE-2012-1573.

    This updated package provides updated components that include fixes for     various security issues. These issues have no security impact on Red Hat     Enterprise Virtualization Hypervisor itself, however. The security fixes     included in this update address the following CVE numbers:

    CVE-2011-4128 (gnutls issue)

    CVE-2012-0879, CVE-2012-1090, and CVE-2012-1097 (kernel issues)

    CVE-2012-0884 and CVE-2012-1165 (openssl issues)

    CVE-2012-0060, CVE-2012-0061, and CVE-2012-0815 (rpm issues)

    This update also fixes the following bug:

    * The Hypervisor previously set the lro_disable option for the enic driver.
    The driver does not support this option, as a result the Hypervisor did     not correctly detect and configure the network interfaces of a Cisco M81KR     adaptor, when present. The Hypervisor has been updated and no longer sets     the invalid option for this driver. (BZ#809463)

    Users of Red Hat Enterprise Virtualization Hypervisor are advised to     upgrade to this updated package, which fixes these issues.

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

Mu Dynamics, Inc. reports :

The block cipher decryption logic in GnuTLS assumed that a record containing any data which was a multiple of the block size was valid for further decryption processing, leading to a heap corruption vulnerability.

The GnuTLS library provides support for cryptographic algorithms and for protocols such as Transport Layer Security (TLS). GnuTLS includes libtasn1, a library developed for ASN.1 (Abstract Syntax Notation One) structures management that includes DER (Distinguished Encoding Rules) encoding and decoding.

A flaw was found in the way GnuTLS decrypted malformed TLS records.
This could cause a TLS/SSL client or server to crash when processing a specially crafted TLS record from a remote TLS/SSL connection peer.
(CVE-2012-1573)

A flaw was found in the way libtasn1 decoded DER data. An attacker could create a carefully-crafted X.509 certificate that, when parsed by an application that uses GnuTLS, could cause the application to crash. (CVE-2012-1569)

A boundary error was found in the gnutls_session_get_data() function.
A malicious TLS/SSL server could use this flaw to crash a TLS/SSL client or, possibly, execute arbitrary code as the client, if the client passed a fixed-sized buffer to gnutls_session_get_data() before checking the real size of the session data provided by the server.
(CVE-2011-4128)

Users of GnuTLS are advised to upgrade to these updated packages, which contain backported patches to correct these issues. For the update to take effect, all applications linked to the GnuTLS library must be restarted, or the system rebooted.

The remote Oracle Linux 5 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2012-0428 advisory.

    - fix CVE-2011-4128 - buffer overflow in gnutls_session_get_data() (#752308)
    - fix CVE-2012-1569 - missing length check when decoding DER lengths (#804920)

Tenable has extracted the preceding description block directly from the Oracle Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

A flaw was found in the way GnuTLS decrypted malformed TLS records.
This could cause a TLS/SSL client or server to crash when processing a specially crafted TLS record from a remote TLS/SSL connection peer.
(CVE-2012-1573)

A boundary error was found in the gnutls_session_get_data() function.
A malicious TLS/SSL server could use this flaw to crash a TLS/SSL client or, possibly, execute arbitrary code as the client, if the client passed a fixed-sized buffer to gnutls_session_get_data() before checking the real size of the session data provided by the server.
(CVE-2011-4128)

Important security update fixing two security issues.

Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

3 vulnerabilities were discovered for the gnutls packages in openSUSE version 12.1.

ID	名称	产品	系列	发布时间	最近更新时间	严重程度
284375	MiracleLinux 4 : gnutls-2.8.5-4.2.0.1.AXS4 (AXSA:2012-458:01)	Nessus	Miracle Linux Local Security Checks	2026/1/14	2026/1/14	critical
79286	RHEL 5 : rhev-hypervisor5 (RHSA-2012:0488)	Nessus	Red Hat Local Security Checks	2014/11/17	2021/1/14	medium
70439	Slackware 12.1 / 12.2 / 13.0 / 13.1 / 13.37 : gnutls (SSA:2013-287-03)	Nessus	Slackware Local Security Checks	2013/10/15	2021/1/14	medium
58505	Mandriva Linux Security Advisory : gnutls (MDVSA-2012:040)	Nessus	Mandriva Local Security Checks	2012/3/28	2021/1/6	medium
58510	RHEL 6 : gnutls (RHSA-2012:0429)	Nessus	Red Hat Local Security Checks	2012/3/28	2021/1/14	medium
78922	RHEL 6 : rhev-hypervisor6 (RHSA-2012:0531)	Nessus	Red Hat Local Security Checks	2014/11/8	2024/6/3	critical
58423	FreeBSD : gnutls -- possible overflow/Denial of service vulnerabilities (aecee357-739e-11e1-a883-001cc0a36e12)	Nessus	FreeBSD Local Security Checks	2012/3/22	2021/1/6	medium
61290	Scientific Linux Security Update : gnutls on SL5.x i386/x86_64 (20120327)	Nessus	Scientific Linux Local Security Checks	2012/8/1	2021/1/14	medium
68503	Oracle Linux 5 : gnutls (ELSA-2012-0428)	Nessus	Oracle Linux Local Security Checks	2013/7/12	2025/4/29	critical
69666	Amazon Linux AMI : gnutls (ALAS-2012-59)	Nessus	Amazon Linux Local Security Checks	2013/9/4	2018/4/18	medium
58668	Fedora 15 : gnutls-2.10.5-3.fc15 (2012-4569)	Nessus	Fedora Local Security Checks	2012/4/11	2021/1/11	medium
74627	openSUSE Security Update : gnutls (openSUSE-SU-2012:0620-1)	Nessus	SuSE Local Security Checks	2014/6/13	2021/1/19	high

检测

插件搜索

critical

medium

medium

medium

medium

critical

medium

medium

critical

medium

medium

high