Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
The _gnutls_server_name_recv_params function in lib/ext_server_name.c in libgnutls in gnutls-serv in GnuTLS before 2.2.4 does not properly calculate the number of Server Names in a TLS 1.0 Client Hello message during extension handling, which allows remote attackers to cause a denial of service (crash) or possibly execute arbitrary code via a zero value for the length of Server Names, which leads to a buffer overflow in session resumption data in the pack_security_parameters function, aka GNUTLS-SA-2008-1-1.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
GnuTLS 'lib/ext_server_name.c'堆溢出及拒绝服务漏洞
Vulnerability Description
GnuTLS是用于实现TLS加密协议的函数库。 GnuTLS在处理各种畸形TLS报文时存在多个安全漏洞，可能导致拒绝服务或完全入侵运行该库应用程序所在的操作系统。如果用户所发送的Client Hello消息包含有Server Name扩展的话，就可能在lib/ext_server_name.c文件的pack_security_parameters函数中触发堆溢出，导致执行任意代码。AKA编号GNUTLS-SA-2008-1-1。
CVSS Information
N/A
Vulnerability Type
N/A