Evil-DB LogoEvil-DB
← All CVEs

CVE-2015-6251

medium · 5

Double free vulnerability in GnuTLS before 3.3.17 and 3.4.x before 3.4.4 allows remote attackers to cause a denial of service via a long DistinguishedName (DN) entry in a certificate.

5
CVSS
19.0%
EPSS (exploit prob.)
97th
EPSS percentile
2015-08-24
Published

AV:N/AC:L/Au:N/C:N/I:N/A:P

Affected products

VendorProductAffected versions
gnugnutls3.3.0
gnugnutls3.3.0
gnugnutls3.3.1
gnugnutls3.3.2
gnugnutls3.3.3
gnugnutls3.3.4
gnugnutls3.3.5
gnugnutls3.3.6
gnugnutls3.3.7
gnugnutls3.3.8
gnugnutls3.3.9
gnugnutls3.3.10
gnugnutls3.3.11
gnugnutls3.3.12
gnugnutls3.3.13
gnugnutls3.3.14
gnugnutls3.3.15
gnugnutls3.3.16
gnugnutls3.4.0
gnugnutls3.4.1
gnugnutls3.4.2
gnugnutls3.4.3
debiandebian_linux8.0

Check a specific version with /api/v1/cve/match.

References

Query this programmatically:

curl https://evil-db.io/api/v1/cve/CVE-2015-6251