CVE-2014-0092

EPSS 4.8%

gnutls26 - incorrect certificate verification

Published: 3/7/2014Modified: 4/28/2026

Description

lib/x509/verify.c in GnuTLS before 3.1.22 and 3.2.x before 3.2.12 does not properly handle unspecified errors when verifying X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers via a crafted certificate.

Affected packages (2)

Debian/gnutls26from 0, < 2.8.6-1+squeeze3
Debian/gnutls28from 0, < 3.2.11-2

References (1)

ADVISORYhttps://security-tracker.debian.org/tracker/CVE-2014-0092