High · published January 16, 2024
A vulnerability was found in GnuTLS, where a cockpit (which uses gnuTLS) rejects a certificate chain with distributed trust. This issue occurs when validating a certificate chain with cockpit-certificate-ensure. This flaw allows an unauthenticated, remote client or attacker to initiate a denial of service attack.
| Product | Versions | Fixed in |
|---|---|---|
| gnu/gnutls | ≥ 3.7.0, < 3.8.3 | 3.8.3 |
| fedoraproject/fedora | all versions | — |
| fedoraproject/fedora | all versions | — |
| netapp/active_iq_unified_manager | all versions | — |
| debian/debian_linux | all versions | — |