CVE-2008-2377

Use-after-free vulnerability in the _gnutls_handshake_hash_buffers_clear function in lib/gnutls_handshake.c in libgnutls in GnuTLS 2.3.5 through 2.4.0 allows…

published August 8, 2008

CVSS
—
EPSS
5%
Percentile
92.7
In the wild
Unconfirmed
What it is

Use-after-free vulnerability in the _gnutls_handshake_hash_buffers_clear function in lib/gnutls_handshake.c in libgnutls in GnuTLS 2.3.5 through 2.4.0 allows remote attackers to cause a denial of service (crash) or possibly execute arbitrary code via TLS transmission of data that is improperly used when the peer calls gnutls_handshake within a normal session, leading to attempted access to a deallocated libgcrypt handle.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.05457 · 92.7th percentile
Published
2008-08-08T19:00Z
EPSS history
Timeline
  • 08 AUG 19:00Z
    Use-after-free vulnerability in the _gnutls_handshake_hash_buffers_clear function in lib/gnutls_handshake.c in libgnutls in GnuTLS 2.3.5 through 2.4.0 allows…
    cvelistv5