Important security update fixing two security issues.

Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

Update fixing an important security issue and memory leak.

Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

Updated gnutls packages that fix three security issues are now available for Red Hat Enterprise Linux 5.

The Red Hat Security Response Team has rated this update as having important security impact. Common Vulnerability Scoring System (CVSS) base scores, which give detailed severity ratings, are available for each vulnerability from the CVE links in the References section.

The GnuTLS library provides support for cryptographic algorithms and for protocols such as Transport Layer Security (TLS). GnuTLS includes libtasn1, a library developed for ASN.1 (Abstract Syntax Notation One) structures management that includes DER (Distinguished Encoding Rules) encoding and decoding.

A flaw was found in the way GnuTLS decrypted malformed TLS records.
This could cause a TLS/SSL client or server to crash when processing a specially crafted TLS record from a remote TLS/SSL connection peer.
(CVE-2012-1573)

A flaw was found in the way libtasn1 decoded DER data. An attacker could create a carefully-crafted X.509 certificate that, when parsed by an application that uses GnuTLS, could cause the application to crash. (CVE-2012-1569)

A boundary error was found in the gnutls_session_get_data() function.
A malicious TLS/SSL server could use this flaw to crash a TLS/SSL client or, possibly, execute arbitrary code as the client, if the client passed a fixed-sized buffer to gnutls_session_get_data() before checking the real size of the session data provided by the server.
(CVE-2011-4128)

Red Hat would like to thank Matthew Hall of Mu Dynamics for reporting CVE-2012-1573 and CVE-2012-1569.

Users of GnuTLS are advised to upgrade to these updated packages, which contain backported patches to correct these issues. For the update to take effect, all applications linked to the GnuTLS library must be restarted, or the system rebooted.

The GnuTLS library provides support for cryptographic algorithms and for protocols such as Transport Layer Security (TLS).

A flaw was found in the way GnuTLS decrypted malformed TLS records.
This could cause a TLS/SSL client or server to crash when processing a specially crafted TLS record from a remote TLS/SSL connection peer.
(CVE-2012-1573)

A boundary error was found in the gnutls_session_get_data() function.
A malicious TLS/SSL server could use this flaw to crash a TLS/SSL client or, possibly, execute arbitrary code as the client, if the client passed a fixed-sized buffer to gnutls_session_get_data() before checking the real size of the session data provided by the server.
(CVE-2011-4128)

Users of GnuTLS are advised to upgrade to these updated packages, which contain backported patches to correct these issues. For the update to take effect, all applications linked to the GnuTLS library must be restarted, or the system rebooted.

This update of GnuTLS fixes multiple vulnerabilities :

  - remote attackers could cause a denial of service (heap     memory corruption and application crash) via an issue in     the asn1_get_length_der() function. (CVE-2012-1569)

  - crafted GenericBlockCipher structures allow remote     attackers to cause a denial of service (heap memory     corruption and application crash). (CVE-2012-1573)

  - A vulnerability in the DTLS implementation which could     allow remote attackers to recover partial plaintext via     a timing side-channel attack was fixed. (CVE-2012-0390)

This update of GnuTLS fixes multiple vulnerabilities :

  - remote attackers could cause a denial of service (heap     memory corruption and application crash) via an issue in     the asn1_get_length_der() function. (CVE-2012-1569)

  - crafted GenericBlockCipher structures allow remote     attackers to cause a denial of service (heap memory     corruption and application crash). (CVE-2012-1573)

  - A vulnerability in the DTLS implementation which could     allow remote attackers to recover partial plaintext via     a timing side-channel attack was fixed. (CVE-2012-0390)

In addition, support for customizing the signing function was added.

The remote MiracleLinux 4 host has packages installed that are affected by multiple vulnerabilities as referenced in the AXSA:2012-458:01 advisory.

    GnuTLS is a project that aims to develop a library which provides a secure layer, over a reliable     transport layer. Currently the GnuTLS library implements the proposed standards by the IETF's TLS working     group.
    Security issues fixed with this release:
     CVE-2011-4128     Buffer overflow in the gnutls_session_get_data function in lib/gnutls_session.c in GnuTLS 2.12.x before     2.12.14 and 3.x before 3.0.7, when used on a client that performs nonstandard session resumption, allows     remote TLS servers to cause a denial of service (application crash) via a large SessionTicket.
     CVE-2012-1573     gnutls_cipher.c in libgnutls in GnuTLS before 2.12.17 and 3.x before 3.0.15 does not properly handle data     encrypted with a block cipher, which allows remote attackers to cause a denial of service (heap memory     corruption and application crash) via a crafted record, as demonstrated by a crafted GenericBlockCipher     structure.

Tenable has extracted the preceding description block directly from the MiracleLinux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

An updated rhev-hypervisor5 package that fixes three security issues and one bug is now available.

The Red Hat Security Response Team has rated this update as having important security impact. Common Vulnerability Scoring System (CVSS) base scores, which give detailed severity ratings, are available for each vulnerability from the CVE links in the References section.

The rhev-hypervisor5 package provides a Red Hat Enterprise Virtualization Hypervisor ISO disk image. The Red Hat Enterprise Virtualization Hypervisor is a dedicated Kernel-based Virtual Machine (KVM) hypervisor. It includes everything necessary to run and manage virtual machines: A subset of the Red Hat Enterprise Linux operating environment and the Red Hat Enterprise Virtualization Agent.

Note: Red Hat Enterprise Virtualization Hypervisor is only available for the Intel 64 and AMD64 architectures with virtualization extensions.

A flaw was found in the way libtasn1 decoded DER data. An attacker could create a carefully-crafted X.509 certificate that, when parsed by an application that uses GnuTLS, could cause the application to crash. (CVE-2012-1569)

A flaw was found in the way GnuTLS decrypted malformed TLS records.
This could cause a TLS/SSL client or server to crash when processing a specially crafted TLS record from a remote TLS/SSL connection peer.
(CVE-2012-1573)

An integer overflow flaw was found in the implementation of the printf functions family. This could allow an attacker to bypass FORTIFY_SOURCE protections and execute arbitrary code using a format string flaw in an application, even though these protections are expected to limit the impact of such flaws to an application abort.
(CVE-2012-0864)

Red Hat would like to thank Matthew Hall of Mu Dynamics for reporting CVE-2012-1569 and CVE-2012-1573.

This updated package provides updated components that include fixes for various security issues. These issues have no security impact on Red Hat Enterprise Virtualization Hypervisor itself, however. The security fixes included in this update address the following CVE numbers :

CVE-2011-4128 (gnutls issue)

CVE-2012-1583 (kernel issue)

CVE-2011-3045 (libpng issue)

CVE-2012-0884 and CVE-2012-1165 (openssl issues)

Further information on the changes made to the package is available on the relevant errata :

https://rhn.redhat.com/errata/RHBA-2012-0398.html

Users of Red Hat Enterprise Virtualization Hypervisor are advised to upgrade to this updated package, which fixes these issues.

A vulnerability has been found and corrected in GnuTLS :

gnutls_cipher.c in libgnutls in GnuTLS before 2.12.17 and 3.x before 3.0.15 does not properly handle data encrypted with a block cipher, which allows remote attackers to cause a denial of service (heap memory corruption and application crash) via a crafted record, as demonstrated by a crafted GenericBlockCipher structure (CVE-2012-1573).

The updated packages have been patched to correct this issue.

The GnuTLS packages for Mandriva Linux 2011 has been upgraded to the 2.12.8 version due to problems with the test suite while building it, additionally a new dependency was added on p11-kit for the PKCS #11 support.

New gnutls packages are available for Slackware 12.1, 12.2, 13.0, 13.1, and 13.37 to fix security issues.

Updated gnutls packages that fix two security issues are now available for Red Hat Enterprise Linux 6.

The Red Hat Security Response Team has rated this update as having important security impact. Common Vulnerability Scoring System (CVSS) base scores, which give detailed severity ratings, are available for each vulnerability from the CVE links in the References section.

The GnuTLS library provides support for cryptographic algorithms and for protocols such as Transport Layer Security (TLS).

A flaw was found in the way GnuTLS decrypted malformed TLS records.
This could cause a TLS/SSL client or server to crash when processing a specially crafted TLS record from a remote TLS/SSL connection peer.
(CVE-2012-1573)

A boundary error was found in the gnutls_session_get_data() function.
A malicious TLS/SSL server could use this flaw to crash a TLS/SSL client or, possibly, execute arbitrary code as the client, if the client passed a fixed-sized buffer to gnutls_session_get_data() before checking the real size of the session data provided by the server.
(CVE-2011-4128)

Red Hat would like to thank Matthew Hall of Mu Dynamics for reporting CVE-2012-1573.

Users of GnuTLS are advised to upgrade to these updated packages, which contain backported patches to correct these issues. For the update to take effect, all applications linked to the GnuTLS library must be restarted, or the system rebooted.

The remote Redhat Enterprise Linux 6 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2012:0531 advisory.

    The rhev-hypervisor6 package provides a Red Hat Enterprise Virtualization     Hypervisor ISO disk image. The Red Hat Enterprise Virtualization Hypervisor     is a dedicated Kernel-based Virtual Machine (KVM) hypervisor. It includes     everything necessary to run and manage virtual machines: A subset of the     Red Hat Enterprise Linux operating environment and the Red Hat Enterprise     Virtualization Agent.

    Note: Red Hat Enterprise Virtualization Hypervisor is only available for     the Intel 64 and AMD64 architectures with virtualization extensions.

    A flaw was found in the way libtasn1 decoded DER data. An attacker could     create carefully-crafted DER encoded input (such as an X.509 certificate)     that, when parsed by an application that uses libtasn1 (such as     applications using GnuTLS), could cause the application to crash.
    (CVE-2012-1569)

    A flaw was found in the way GnuTLS decrypted malformed TLS records. This     could cause a TLS/SSL client or server to crash when processing a     specially-crafted TLS record from a remote TLS/SSL connection peer.
    (CVE-2012-1573)

    An integer overflow flaw was found in the implementation of the printf     functions family. This could allow an attacker to bypass FORTIFY_SOURCE     protections and execute arbitrary code using a format string flaw in an     application, even though these protections are expected to limit the     impact of such flaws to an application abort. (CVE-2012-0864)

    Red Hat would like to thank Matthew Hall of Mu Dynamics for reporting     CVE-2012-1569 and CVE-2012-1573.

    This updated package provides updated components that include fixes for     various security issues. These issues have no security impact on Red Hat     Enterprise Virtualization Hypervisor itself, however. The security fixes     included in this update address the following CVE numbers:

    CVE-2011-4128 (gnutls issue)

    CVE-2012-0879, CVE-2012-1090, and CVE-2012-1097 (kernel issues)

    CVE-2012-0884 and CVE-2012-1165 (openssl issues)

    CVE-2012-0060, CVE-2012-0061, and CVE-2012-0815 (rpm issues)

    This update also fixes the following bug:

    * The Hypervisor previously set the lro_disable option for the enic driver.
    The driver does not support this option, as a result the Hypervisor did     not correctly detect and configure the network interfaces of a Cisco M81KR     adaptor, when present. The Hypervisor has been updated and no longer sets     the invalid option for this driver. (BZ#809463)

    Users of Red Hat Enterprise Virtualization Hypervisor are advised to     upgrade to this updated package, which fixes these issues.

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

ID	Name	Product	Family	Published	Updated	Severity
58668	Fedora 15 : gnutls-2.10.5-3.fc15 (2012-4569)	Nessus	Fedora Local Security Checks	4/11/2012	1/11/2021	medium
58469	Fedora 16 : gnutls-2.12.14-2.fc16 (2012-4578)	Nessus	Fedora Local Security Checks	3/26/2012	1/11/2021	medium
58504	CentOS 5 : gnutls (CESA-2012:0428)	Nessus	CentOS Local Security Checks	3/28/2012	1/4/2021	medium
61291	Scientific Linux Security Update : gnutls on SL6.x i386/x86_64 (20120327)	Nessus	Scientific Linux Local Security Checks	8/1/2012	1/14/2021	medium
59829	SuSE 10 Security Update : GnuTLS (ZYPP Patch Number 8066)	Nessus	SuSE Local Security Checks	7/3/2012	1/19/2021	medium
64152	SuSE 11.1 Security Update : GnuTLS (SAT Patch Number 6448)	Nessus	SuSE Local Security Checks	1/25/2013	1/19/2021	medium
284375	MiracleLinux 4 : gnutls-2.8.5-4.2.0.1.AXS4 (AXSA:2012-458:01)	Nessus	Miracle Linux Local Security Checks	1/14/2026	1/14/2026	critical
79286	RHEL 5 : rhev-hypervisor5 (RHSA-2012:0488)	Nessus	Red Hat Local Security Checks	11/17/2014	1/14/2021	medium
58505	Mandriva Linux Security Advisory : gnutls (MDVSA-2012:040)	Nessus	Mandriva Local Security Checks	3/28/2012	1/6/2021	medium
70439	Slackware 12.1 / 12.2 / 13.0 / 13.1 / 13.37 : gnutls (SSA:2013-287-03)	Nessus	Slackware Local Security Checks	10/15/2013	1/14/2021	medium
58510	RHEL 6 : gnutls (RHSA-2012:0429)	Nessus	Red Hat Local Security Checks	3/28/2012	1/14/2021	medium
78922	RHEL 6 : rhev-hypervisor6 (RHSA-2012:0531)	Nessus	Red Hat Local Security Checks	11/8/2014	6/3/2024	critical

Detections

Analytics

Plugins Search

medium

medium

medium

medium

medium

medium

critical

medium

medium

medium

medium

critical