CVE-2008-1950 Detail

CVE-2008-1950

EPSS

9.05%V3

Vector

Network

Published

2008-05-21
08h00 +00:00

Modified

2018-10-11
17h57 +00:00

Official links

CVE.org

NVD

Notifications for a CVE

Stay informed of any changes for a specific CVE.

Notifications manage

List of Notifications

Notifications for a CVE

Stay informed of any changes for a specific CVE.

Criteria applied when sending the alert: compared with the last alert sent + differences in CISA, EPSS, CVSS, CWE, Solutions, CPE.

Parameters

You can specify a title that will be retrieved in the alerts that will be sent out.

Specified here a CVE ID as CVE-2025-1234

Planning

Month

Next run calculation

Day

Weekday

Hour

Minute

Creation date

Last execution

Next execution

Functionality requiring a connection

This feature, which allows you to receive alerts, is only active when you are logged into your account.

CVE Descriptions

Integer signedness error in the _gnutls_ciphertext2compressed function in lib/gnutls_cipher.c in libgnutls in GnuTLS before 2.2.4 allows remote attackers to cause a denial of service (buffer over-read and crash) via a certain integer value in the Random field in an encrypted Client Hello message within a TLS record with an invalid Record Length, which leads to an invalid cipher padding length, aka GNUTLS-SA-2008-1-3.

CVE Informations

Related Weaknesses

CWE-ID	Weakness Name	Source
CWE-189	Category : Numeric Errors Weaknesses in this category are related to improper calculation or conversion of numbers.

Metrics

Metrics	Score	Severity	CVSS Vector	Source
V2	5		AV:N/AC:L/Au:N/C:N/I:N/A:P	[email protected]

EPSS

EPSS is a scoring model that predicts the likelihood of a vulnerability being exploited.

EPSS Score

The EPSS model produces a probability score between 0 and 1 (0 and 100%). The higher the score, the greater the probability that a vulnerability will be exploited.

EPSS Percentile

The percentile is used to rank CVE according to their EPSS score. For example, a CVE in the 95th percentile according to its EPSS score is more likely to be exploited than 95% of other CVE. Thus, the percentile is used to compare the EPSS score of a CVE with that of other CVE.

EPSS First.org

Products Mentioned

Configuraton 0

Gnu>>Gnutls >> Version 1.0.18

Gnu>>Gnutls >> Version 1.0.18 (Open CPE detail)

Gnu>>Gnutls >> Version 1.0.19

Gnu>>Gnutls >> Version 1.0.19 (Open CPE detail)

Gnu>>Gnutls >> Version 1.0.20

Gnu>>Gnutls >> Version 1.0.20 (Open CPE detail)

Gnu>>Gnutls >> Version 1.0.21

Gnu>>Gnutls >> Version 1.0.21 (Open CPE detail)

Gnu>>Gnutls >> Version 1.0.22

Gnu>>Gnutls >> Version 1.0.22 (Open CPE detail)

Gnu>>Gnutls >> Version 1.0.23

Gnu>>Gnutls >> Version 1.0.23 (Open CPE detail)

Gnu>>Gnutls >> Version 1.0.24

Gnu>>Gnutls >> Version 1.0.24 (Open CPE detail)

Gnu>>Gnutls >> Version 1.0.25

Gnu>>Gnutls >> Version 1.0.25 (Open CPE detail)

Gnu>>Gnutls >> Version 1.1.13

Gnu>>Gnutls >> Version 1.1.13 (Open CPE detail)

Gnu>>Gnutls >> Version 1.1.14

Gnu>>Gnutls >> Version 1.1.14 (Open CPE detail)

Gnu>>Gnutls >> Version 1.1.15

Gnu>>Gnutls >> Version 1.1.15 (Open CPE detail)

Gnu>>Gnutls >> Version 1.1.16

Gnu>>Gnutls >> Version 1.1.16 (Open CPE detail)

Gnu>>Gnutls >> Version 1.1.17

Gnu>>Gnutls >> Version 1.1.17 (Open CPE detail)

Gnu>>Gnutls >> Version 1.1.18

Gnu>>Gnutls >> Version 1.1.18 (Open CPE detail)

Gnu>>Gnutls >> Version 1.1.19

Gnu>>Gnutls >> Version 1.1.19 (Open CPE detail)

Gnu>>Gnutls >> Version 1.1.20

Gnu>>Gnutls >> Version 1.1.20 (Open CPE detail)

Gnu>>Gnutls >> Version 1.1.21

Gnu>>Gnutls >> Version 1.1.21 (Open CPE detail)

Gnu>>Gnutls >> Version 1.1.22

Gnu>>Gnutls >> Version 1.1.22 (Open CPE detail)

Gnu>>Gnutls >> Version 1.1.23

Gnu>>Gnutls >> Version 1.1.23 (Open CPE detail)

Gnu>>Gnutls >> Version 1.2.0

Gnu>>Gnutls >> Version 1.2.0 (Open CPE detail)

Gnu>>Gnutls >> Version 1.2.1

Gnu>>Gnutls >> Version 1.2.1 (Open CPE detail)

Gnu>>Gnutls >> Version 1.2.2

Gnu>>Gnutls >> Version 1.2.2 (Open CPE detail)

Gnu>>Gnutls >> Version 1.2.3

Gnu>>Gnutls >> Version 1.2.3 (Open CPE detail)

Gnu>>Gnutls >> Version 1.2.4

Gnu>>Gnutls >> Version 1.2.4 (Open CPE detail)

Gnu>>Gnutls >> Version 1.2.5

Gnu>>Gnutls >> Version 1.2.5 (Open CPE detail)

Gnu>>Gnutls >> Version 1.2.6

Gnu>>Gnutls >> Version 1.2.6 (Open CPE detail)

Gnu>>Gnutls >> Version 1.2.7

Gnu>>Gnutls >> Version 1.2.7 (Open CPE detail)

Gnu>>Gnutls >> Version 1.2.8

Gnu>>Gnutls >> Version 1.2.8 (Open CPE detail)

Gnu>>Gnutls >> Version 1.2.9

Gnu>>Gnutls >> Version 1.2.9 (Open CPE detail)

Gnu>>Gnutls >> Version 1.2.10

Gnu>>Gnutls >> Version 1.2.10 (Open CPE detail)

Gnu>>Gnutls >> Version 1.2.11

Gnu>>Gnutls >> Version 1.2.11 (Open CPE detail)

Gnu>>Gnutls >> Version 1.3.0

Gnu>>Gnutls >> Version 1.3.0 (Open CPE detail)

Gnu>>Gnutls >> Version 1.3.1

Gnu>>Gnutls >> Version 1.3.1 (Open CPE detail)

Gnu>>Gnutls >> Version 1.3.2

Gnu>>Gnutls >> Version 1.3.2 (Open CPE detail)

Gnu>>Gnutls >> Version 1.3.3

Gnu>>Gnutls >> Version 1.3.3 (Open CPE detail)

Gnu>>Gnutls >> Version 1.3.4

Gnu>>Gnutls >> Version 1.3.4 (Open CPE detail)

Gnu>>Gnutls >> Version 1.3.5

Gnu>>Gnutls >> Version 1.3.5 (Open CPE detail)

Gnu>>Gnutls >> Version 1.4.0

Gnu>>Gnutls >> Version 1.4.0 (Open CPE detail)

Gnu>>Gnutls >> Version 1.4.1

Gnu>>Gnutls >> Version 1.4.1 (Open CPE detail)

Gnu>>Gnutls >> Version 1.4.2

Gnu>>Gnutls >> Version 1.4.2 (Open CPE detail)

Gnu>>Gnutls >> Version 1.4.3

Gnu>>Gnutls >> Version 1.4.3 (Open CPE detail)

Gnu>>Gnutls >> Version 1.4.4

Gnu>>Gnutls >> Version 1.4.4 (Open CPE detail)

Gnu>>Gnutls >> Version 1.4.5

Gnu>>Gnutls >> Version 1.4.5 (Open CPE detail)

Gnu>>Gnutls >> Version 1.5.0

Gnu>>Gnutls >> Version 1.5.0 (Open CPE detail)

Gnu>>Gnutls >> Version 1.5.1

Gnu>>Gnutls >> Version 1.5.1 (Open CPE detail)

Gnu>>Gnutls >> Version 1.5.2

Gnu>>Gnutls >> Version 1.5.2 (Open CPE detail)

Gnu>>Gnutls >> Version 1.5.3

Gnu>>Gnutls >> Version 1.5.3 (Open CPE detail)

Gnu>>Gnutls >> Version 1.5.4

Gnu>>Gnutls >> Version 1.5.4 (Open CPE detail)

Gnu>>Gnutls >> Version 1.5.5

Gnu>>Gnutls >> Version 1.5.5 (Open CPE detail)

Gnu>>Gnutls >> Version 1.6.0

Gnu>>Gnutls >> Version 1.6.0 (Open CPE detail)

Gnu>>Gnutls >> Version 1.6.1

Gnu>>Gnutls >> Version 1.6.1 (Open CPE detail)

Gnu>>Gnutls >> Version 1.6.2

Gnu>>Gnutls >> Version 1.6.2 (Open CPE detail)

Gnu>>Gnutls >> Version 1.6.3

Gnu>>Gnutls >> Version 1.6.3 (Open CPE detail)

Gnu>>Gnutls >> Version 1.7.0

Gnu>>Gnutls >> Version 1.7.0 (Open CPE detail)

Gnu>>Gnutls >> Version 1.7.1

Gnu>>Gnutls >> Version 1.7.1 (Open CPE detail)

Gnu>>Gnutls >> Version 1.7.2

Gnu>>Gnutls >> Version 1.7.2 (Open CPE detail)

Gnu>>Gnutls >> Version 1.7.3

Gnu>>Gnutls >> Version 1.7.3 (Open CPE detail)

Gnu>>Gnutls >> Version 1.7.4

Gnu>>Gnutls >> Version 1.7.4 (Open CPE detail)

Gnu>>Gnutls >> Version 1.7.5

Gnu>>Gnutls >> Version 1.7.5 (Open CPE detail)

Gnu>>Gnutls >> Version 1.7.6

Gnu>>Gnutls >> Version 1.7.6 (Open CPE detail)

Gnu>>Gnutls >> Version 1.7.7

Gnu>>Gnutls >> Version 1.7.7 (Open CPE detail)

Gnu>>Gnutls >> Version 1.7.8

Gnu>>Gnutls >> Version 1.7.8 (Open CPE detail)

Gnu>>Gnutls >> Version 1.7.9

Gnu>>Gnutls >> Version 1.7.9 (Open CPE detail)

Gnu>>Gnutls >> Version 1.7.10

Gnu>>Gnutls >> Version 1.7.10 (Open CPE detail)

Gnu>>Gnutls >> Version 1.7.11

Gnu>>Gnutls >> Version 1.7.11 (Open CPE detail)

Gnu>>Gnutls >> Version 1.7.12

Gnu>>Gnutls >> Version 1.7.12 (Open CPE detail)

Gnu>>Gnutls >> Version 1.7.13

Gnu>>Gnutls >> Version 1.7.13 (Open CPE detail)

Gnu>>Gnutls >> Version 1.7.14

Gnu>>Gnutls >> Version 1.7.14 (Open CPE detail)

Gnu>>Gnutls >> Version 1.7.15

Gnu>>Gnutls >> Version 1.7.15 (Open CPE detail)

Gnu>>Gnutls >> Version 1.7.16

Gnu>>Gnutls >> Version 1.7.16 (Open CPE detail)

Gnu>>Gnutls >> Version 1.7.17

Gnu>>Gnutls >> Version 1.7.17 (Open CPE detail)

Gnu>>Gnutls >> Version 1.7.18

Gnu>>Gnutls >> Version 1.7.18 (Open CPE detail)

Gnu>>Gnutls >> Version 1.7.19

Gnu>>Gnutls >> Version 1.7.19 (Open CPE detail)

Gnu>>Gnutls >> Version 2.0.0

Gnu>>Gnutls >> Version 2.0.0 (Open CPE detail)

Gnu>>Gnutls >> Version 2.0.1

Gnu>>Gnutls >> Version 2.0.1 (Open CPE detail)

Gnu>>Gnutls >> Version 2.0.2

Gnu>>Gnutls >> Version 2.0.2 (Open CPE detail)

Gnu>>Gnutls >> Version 2.0.3

Gnu>>Gnutls >> Version 2.0.3 (Open CPE detail)

Gnu>>Gnutls >> Version 2.0.4

Gnu>>Gnutls >> Version 2.0.4 (Open CPE detail)

Gnu>>Gnutls >> Version 2.1.0

Gnu>>Gnutls >> Version 2.1.0 (Open CPE detail)

Gnu>>Gnutls >> Version 2.1.1

Gnu>>Gnutls >> Version 2.1.1 (Open CPE detail)

Gnu>>Gnutls >> Version 2.1.2

Gnu>>Gnutls >> Version 2.1.2 (Open CPE detail)

Gnu>>Gnutls >> Version 2.1.3

Gnu>>Gnutls >> Version 2.1.3 (Open CPE detail)

Gnu>>Gnutls >> Version 2.1.4

Gnu>>Gnutls >> Version 2.1.4 (Open CPE detail)

Gnu>>Gnutls >> Version 2.1.5

Gnu>>Gnutls >> Version 2.1.5 (Open CPE detail)

Gnu>>Gnutls >> Version 2.1.6

Gnu>>Gnutls >> Version 2.1.6 (Open CPE detail)

Gnu>>Gnutls >> Version 2.1.7

Gnu>>Gnutls >> Version 2.1.7 (Open CPE detail)

Gnu>>Gnutls >> Version 2.1.8

Gnu>>Gnutls >> Version 2.1.8 (Open CPE detail)

Gnu>>Gnutls >> Version 2.2.0

Gnu>>Gnutls >> Version 2.2.0 (Open CPE detail)

Gnu>>Gnutls >> Version 2.2.1

Gnu>>Gnutls >> Version 2.2.1 (Open CPE detail)

Gnu>>Gnutls >> Version 2.2.2

Gnu>>Gnutls >> Version 2.2.2 (Open CPE detail)

Gnu>>Gnutls >> Version 2.2.3

Gnu>>Gnutls >> Version 2.2.3 (Open CPE detail)

Gnu>>Gnutls >> Version 2.2.4

Gnu>>Gnutls >> Version 2.2.4 (Open CPE detail)

Gnu>>Gnutls >> Version 2.2.5

Gnu>>Gnutls >> Version 2.2.5 (Open CPE detail)

Gnu>>Gnutls >> Version 2.3.0

Gnu>>Gnutls >> Version 2.3.0 (Open CPE detail)

Gnu>>Gnutls >> Version 2.3.1

Gnu>>Gnutls >> Version 2.3.1 (Open CPE detail)

Gnu>>Gnutls >> Version 2.3.2

Gnu>>Gnutls >> Version 2.3.2 (Open CPE detail)

Gnu>>Gnutls >> Version 2.3.3

Gnu>>Gnutls >> Version 2.3.3 (Open CPE detail)

Gnu>>Gnutls >> Version 2.3.4

Gnu>>Gnutls >> Version 2.3.4 (Open CPE detail)

Gnu>>Gnutls >> Version 2.3.5

Gnu>>Gnutls >> Version 2.3.5 (Open CPE detail)

Gnu>>Gnutls >> Version 2.3.6

Gnu>>Gnutls >> Version 2.3.6 (Open CPE detail)

Gnu>>Gnutls >> Version 2.3.7

Gnu>>Gnutls >> Version 2.3.7 (Open CPE detail)

Gnu>>Gnutls >> Version 2.3.8

Gnu>>Gnutls >> Version 2.3.8 (Open CPE detail)

Gnu>>Gnutls >> Version 2.3.9

Gnu>>Gnutls >> Version 2.3.9 (Open CPE detail)

Gnu>>Gnutls >> Version 2.3.10

Gnu>>Gnutls >> Version 2.3.10 (Open CPE detail)

Gnu>>Gnutls >> Version 2.3.11

Gnu>>Gnutls >> Version 2.3.11 (Open CPE detail)

References

http://secunia.com/advisories/30331
Tags : third-party-advisory, x_refsource_SECUNIA

http://secunia.com/advisories/31939
Tags : third-party-advisory, x_refsource_SECUNIA

http://www.ubuntu.com/usn/usn-613-1
Tags : vendor-advisory, x_refsource_UBUNTU

http://lists.opensuse.org/opensuse-security-announce/2008-09/msg00003.html
Tags : vendor-advisory, x_refsource_SUSE

http://www.redhat.com/support/errata/RHSA-2008-0492.html
Tags : vendor-advisory, x_refsource_REDHAT

http://www.openwall.com/lists/oss-security/2008/05/20/1
Tags : mailing-list, x_refsource_MLIST

http://security.gentoo.org/glsa/glsa-200805-20.xml
Tags : vendor-advisory, x_refsource_GENTOO

http://secunia.com/advisories/30355
Tags : third-party-advisory, x_refsource_SECUNIA

http://secunia.com/advisories/30317
Tags : third-party-advisory, x_refsource_SECUNIA

http://www.securityfocus.com/archive/1/492282/100/0/threaded
Tags : mailing-list, x_refsource_BUGTRAQ

http://www.redhat.com/support/errata/RHSA-2008-0489.html
Tags : vendor-advisory, x_refsource_REDHAT

http://www.securityfocus.com/archive/1/492464/100/0/threaded
Tags : mailing-list, x_refsource_BUGTRAQ

http://lists.gnu.org/archive/html/gnutls-devel/2008-05/msg00051.html
Tags : mailing-list, x_refsource_MLIST

http://sourceforge.net/project/shownotes.php?release_id=600646&group_id=21558
Tags : x_refsource_CONFIRM

http://secunia.com/advisories/30324
Tags : third-party-advisory, x_refsource_SECUNIA

http://secunia.com/advisories/30302
Tags : third-party-advisory, x_refsource_SECUNIA

http://lists.gnu.org/archive/html/gnutls-devel/2008-05/msg00055.html
Tags : mailing-list, x_refsource_MLIST

http://www.vupen.com/english/advisories/2008/1583/references
Tags : vdb-entry, x_refsource_VUPEN

http://www.securityfocus.com/bid/29292
Tags : vdb-entry, x_refsource_BID

https://www.redhat.com/archives/fedora-package-announce/2008-May/msg00615.html
Tags : vendor-advisory, x_refsource_FEDORA

http://secunia.com/advisories/30330
Tags : third-party-advisory, x_refsource_SECUNIA

http://www.securitytracker.com/id?1020059
Tags : vdb-entry, x_refsource_SECTRACK

http://www.vupen.com/english/advisories/2008/1582/references
Tags : vdb-entry, x_refsource_VUPEN

http://www.openwall.com/lists/oss-security/2008/05/20/3
Tags : mailing-list, x_refsource_MLIST

http://www.kb.cert.org/vuls/id/659209
Tags : third-party-advisory, x_refsource_CERT-VN

http://wiki.rpath.com/wiki/Advisories:rPSA-2008-0174
Tags : x_refsource_CONFIRM

http://secunia.com/advisories/30338
Tags : third-party-advisory, x_refsource_SECUNIA

http://lists.gnu.org/archive/html/gnutls-devel/2008-05/msg00060.html
Tags : mailing-list, x_refsource_MLIST

http://www.debian.org/security/2008/dsa-1581
Tags : vendor-advisory, x_refsource_DEBIAN

http://www.openwall.com/lists/oss-security/2008/05/20/2
Tags : mailing-list, x_refsource_MLIST

https://exchange.xforce.ibmcloud.com/vulnerabilities/42533
Tags : vdb-entry, x_refsource_XF

https://www.redhat.com/archives/fedora-package-announce/2008-May/msg00590.html
Tags : vendor-advisory, x_refsource_FEDORA

http://securityreason.com/securityalert/3902
Tags : third-party-advisory, x_refsource_SREASON

https://issues.rpath.com/browse/RPL-2552
Tags : x_refsource_CONFIRM

http://secunia.com/advisories/30287
Tags : third-party-advisory, x_refsource_SECUNIA

http://git.savannah.gnu.org/gitweb/?p=gnutls.git%3Ba=commitdiff%3Bh=bc8102405fda11ea00ca3b42acc4f4bce9d6e97b
Tags : x_refsource_CONFIRM

http://www.cert.fi/haavoittuvuudet/advisory-gnutls.html
Tags : x_refsource_MISC

https://www.redhat.com/archives/fedora-package-announce/2008-May/msg00487.html
Tags : vendor-advisory, x_refsource_FEDORA

https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11393
Tags : vdb-entry, signature, x_refsource_OVAL

http://www.mandriva.com/security/advisories?name=MDVSA-2008:106
Tags : vendor-advisory, x_refsource_MANDRIVA

CVE-2008-1950 : Detail

CVE-2008-1950

CVE Descriptions

CVE Informations

Related Weaknesses

Metrics

EPSS

EPSS Score

EPSS Percentile

Products Mentioned

Configuraton 0

References