lib/x509/verify.c in GnuTLS before 3.1.21 and 3.2.x before 3.2.11 treats version 1 X.509 certificates as intermediate CAs, which allows remote attackers to bypass intended restrictions by leveraging a X.509 V1 certificate from a trusted CA to issue new certificates.

Updated gnutls packages fix security vulnerabilities :

Suman Jana reported a vulnerability that affects the certificate verification functions of gnutls 3.1.x and gnutls 3.2.x. A version 1 intermediate certificate will be considered as a CA certificate by default (something that deviates from the documented behavior) (CVE-2014-1959).

It was discovered that GnuTLS did not correctly handle certain errors that could occur during the verification of an X.509 certificate, causing it to incorrectly report a successful verification. An attacker could use this flaw to create a specially crafted certificate that could be accepted by GnuTLS as valid for a site chosen by the attacker (CVE-2014-0092).

A NULL pointer dereference flaw was discovered in GnuTLS's gnutls_x509_dn_oid_name(). The function, when called with the GNUTLS_X509_DN_OID_RETURN_OID flag, should not return NULL to its caller. However, it could previously return NULL when parsed X.509 certificates included specific OIDs (CVE-2014-3465).

A flaw was found in the way GnuTLS parsed session ids from Server Hello packets of the TLS/SSL handshake. A malicious server could use this flaw to send an excessively long session id value and trigger a buffer overflow in a connecting TLS/SSL client using GnuTLS, causing it to crash or, possibly, execute arbitrary code (CVE-2014-3466).

An out-of-bounds memory write flaw was found in the way GnuTLS parsed certain ECC (Elliptic Curve Cryptography) certificates or certificate signing requests (CSR). A malicious user could create a specially crafted ECC certificate or a certificate signing request that, when processed by an application compiled against GnuTLS (for example, certtool), could cause that application to crash or execute arbitrary code with the permissions of the user running the application (CVE-2014-8564).

The remote host is affected by the vulnerability described in GLSA-201406-09 (GnuTLS: Multiple vulnerabilities)

    Multiple vulnerabilities have been discovered in GnuTLS. Please review       the CVE identifiers referenced below for details.
  Impact :

    A remote attacker could utilize multiple vectors to spoof arbitrary SSL       servers via a crafted certificate, execute arbitrary code or cause a       Denial of Service condition.
  Workaround :

    There is no known workaround at this time.

GnuTLS project reports :

A vulnerability was discovered that affects the certificate verification functions of all gnutls versions. A specially crafted certificate could bypass certificate validation checks. The vulnerability was discovered during an audit of GnuTLS for Red Hat.

Suman Jana reported a vulnerability that affects the certificate verification functions of gnutls 2.11.5 and later versions. A version 1 intermediate certificate will be considered as a CA certificate by default (something that deviates from the documented behavior).

Suman Jana discovered that GnuTLS incorrectly handled version 1 intermediate certificates. This resulted in them being considered to be a valid CA certificate by default, which was contrary to documented behaviour.

Note that Tenable Network Security has extracted the preceding description block directly from the Ubuntu security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

Version 3.1.21 (released 2014-02-13)

  - libgnutls: Tolerate servers that sent the SUPPORTED ECC     extension.

  - libgnutls: Reduced the TLS and DTLS version requirements     for all ciphersuites that are not GCM.

  - libgnutls: When two initial keywords are specified then     treat the second as having the '+' modifier.

  - libgnutls: Fixed bug that prevented the rejection of v1     intermediate CA certificates. Reported and investigated     by Suman Jana.

Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

Suman Jana reported that GnuTLS, deviating from the documented behavior, considers a version 1 intermediate certificate as a CA certificate by default.

The oldstable distribution (squeeze) is not affected by this problem as X.509 version 1 trusted CA certificates are not allowed by default.

Fixes CVE-2014-1959

Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

Updated gnutls packages fix security vulnerability :

Suman Jana reported a vulnerability that affects the certificate verification functions of gnutls 3.1.x and gnutls 3.2.x. A version 1 intermediate certificate will be considered as a CA certificate by default (something that deviates from the documented behavior) (CVE-2014-1959).

New gnutls packages are available for Slackware 14.0, 14.1, and
-current to fix a security issue.

Fixed certificate verification issue CVE-2014-1959

Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

ID	Name	Product	Family	Severity
82325	Mandriva Linux Security Advisory : gnutls (MDVSA-2015:072)	Nessus	Mandriva Local Security Checks	medium
76061	GLSA-201406-09 : GnuTLS: Multiple vulnerabilities	Nessus	Gentoo Local Security Checks	medium
72808	FreeBSD : gnutls -- multiple certificate verification issues (f645aa90-a3e8-11e3-a422-3c970e169bc2)	Nessus	FreeBSD Local Security Checks	medium
72701	Ubuntu 12.04 LTS / 12.10 / 13.10 : gnutls26 vulnerability (USN-2121-1)	Nessus	Ubuntu Local Security Checks	medium
72675	Fedora 20 : mingw-gnutls-3.1.21-1.fc20 (2014-2583)	Nessus	Fedora Local Security Checks	medium
72674	Fedora 19 : mingw-gnutls-3.1.21-1.fc19 (2014-2565)	Nessus	Fedora Local Security Checks	medium
72647	Debian DSA-2866-1 : gnutls26 - certificate verification flaw	Nessus	Debian Local Security Checks	medium
72632	Fedora 19 : gnutls-3.1.20-3.fc19 (2014-2588)	Nessus	Fedora Local Security Checks	medium
72596	Mandriva Linux Security Advisory : gnutls (MDVSA-2014:043)	Nessus	Mandriva Local Security Checks	medium
72589	Slackware 14.0 / 14.1 / current : gnutls (SSA:2014-050-01)	Nessus	Slackware Local Security Checks	medium
72547	Fedora 20 : gnutls-3.1.20-3.fc20 (2014-2580)	Nessus	Fedora Local Security Checks	medium

Detections

Analytics

CVE-2014-1959

high

Tenable Plugins

medium

medium

medium

medium

medium

medium

medium

medium

medium

medium

medium