Bug 1101734 (CVE-2014-3465) - CVE-2014-3465 gnutls: gnutls_x509_dn_oid_name NULL pointer dereference
Summary: CVE-2014-3465 gnutls: gnutls_x509_dn_oid_name NULL pointer dereference
Alias: CVE-2014-3465
Product: Security Response
Classification: Other
Component: vulnerability
Version: unspecified
Hardware: All
OS: Linux
Target Milestone: ---
Assignee: Red Hat Product Security
QA Contact:
Depends On: 1102027 1102028
Blocks: 1101736
TreeView+ depends on / blocked
Reported: 2014-05-27 19:58 UTC by Tomas Hoger
Modified: 2021-02-17 06:32 UTC (History)
5 users (show)

Fixed In Version: gnutls 3.1.20, gnutls 3.2.10
Doc Type: Bug Fix
Doc Text:
Clone Of:
Last Closed: 2014-06-10 12:29:51 UTC

Attachments (Terms of Use)

System ID Private Priority Status Summary Last Updated
Red Hat Product Errata RHSA-2014:0684 0 normal SHIPPED_LIVE Important: gnutls security update 2014-06-10 16:23:13 UTC

Description Tomas Hoger 2014-05-27 19:58:10 UTC
A NULL pointer dereference flaw was discovered in GnuTLS's gnutls_x509_dn_oid_name().  The function, when called with the GNUTLS_X509_DN_OID_RETURN_OID flag, should not return NULL to its caller.  However, it could previously return NULL when parsed X.509 certificates included specific OIDs.

The issue was corrected upstream using the following commit:

The fix was first included in upstream versions 3.1.20 and 3.2.10:

Affected function was introduced in GnuTLS version 3.0:

The gnutls packages in Red Hat Enterprise Linux 6 and earlier include GnuTLS versions 2.x or 1.x and were therefore not affected by this issue.  The gnutls and mingw-gnutls packages in Fedora are already updated to the fixed upstream version.

Comment 1 Tomas Hoger 2014-05-27 20:00:00 UTC

This issue did not affect the versions of gnutls as shipped with Red Hat Enterprise Linux 4, 5, and 6.

Comment 3 Tomas Hoger 2014-05-29 11:41:33 UTC

Red Hat would like to thank GnuTLS upstream for reporting this issue.

Comment 4 errata-xmlrpc 2014-06-10 12:24:05 UTC
This issue has been addressed in following products:

  Red Hat Enterprise Linux 7

Via RHSA-2014:0684 https://rhn.redhat.com/errata/RHSA-2014-0684.html

Note You need to log in before you can comment on or make changes to this bug.