CVE-2009-1416

lib/gnutls_pk.c in libgnutls in GnuTLS 2.5.0 through 2.6.5 generates RSA keys stored in DSA structures, instead of the intended DSA keys, which might allow…

published April 30, 2009

CVSS
—
EPSS
4%
Percentile
90.2
In the wild
Unconfirmed
What it is

lib/gnutls_pk.c in libgnutls in GnuTLS 2.5.0 through 2.6.5 generates RSA keys stored in DSA structures, instead of the intended DSA keys, which might allow remote attackers to spoof signatures on certificates or have unspecified other impact by leveraging an invalid DSA key.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.03901 · 90.2th percentile
Published
2009-04-30T20:00Z
EPSS history
Timeline
  • 30 APR 20:00Z
    lib/gnutls_pk.c in libgnutls in GnuTLS 2.5.0 through 2.6.5 generates RSA keys stored in DSA structures, instead of the intended DSA keys, which might allow…
    cvelistv5