The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available.

  - Buffer overflow in the read_server_hello function in lib/gnutls_handshake.c in GnuTLS before 3.1.25, 3.2.x     before 3.2.15, and 3.3.x before 3.3.4 allows remote servers to cause a denial of service (memory     corruption) or possibly execute arbitrary code via a long session id in a ServerHello message.
    (CVE-2014-3466)

Note that Nessus relies on the presence of the package as reported by the vendor.

The remote host is affected by the vulnerability described in GLSA-201406-09 (GnuTLS: Multiple vulnerabilities)

    Multiple vulnerabilities have been discovered in GnuTLS. Please review       the CVE identifiers referenced below for details.
  Impact :

    A remote attacker could utilize multiple vectors to spoof arbitrary SSL       servers via a crafted certificate, execute arbitrary code or cause a       Denial of Service condition.
  Workaround :

    There is no known workaround at this time.

gnutls was patched to fix two security vulnerabilities that could be used to disrupt service or potentially allow remote code execution.

  - Memory corruption during connect (CVE-2014-3466)

  - NULL pointer dereference in gnutls_x509_dn_oid_name     (CVE-2014-3465)

The remote Ubuntu 14.04 LTS host has packages installed that are affected by a vulnerability as referenced in the USN-2229-1 advisory.

    Joonas Kuorilehto discovered that GnuTLS incorrectly handled Server Hello messages. A malicious remote     server or a machine-in-the-middle could use this issue to cause GnuTLS to crash, resulting in a denial of     service, or possibly execute arbitrary code.

Tenable has extracted the preceding description block directly from the Ubuntu security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

A flaw was found in the way GnuTLS parsed session IDs from ServerHello messages of the TLS/SSL handshake. A malicious server could use this flaw to send an excessively long session ID value, which would trigger a buffer overflow in a connecting TLS/SSL client application using GnuTLS, causing the client application to crash or, possibly, execute arbitrary code. (CVE-2014-3466)

For the update to take effect, all applications linked to the GnuTLS library must be restarted.

Added fix for CVE-2014-3466

Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

GnuTLS has been patched to ensure proper parsing of session ids during the TLS/SSL handshake. Additionally, three issues inherited from libtasn1 have been fixed.

Further information is available at http://www.gnutls.org/security.html#GNUTLS-SA-2014-3

These security issues have been fixed :

  - Possible memory corruption during connect.
    (CVE-2014-3466)

  - Multiple boundary check issues could allow DoS.
    (CVE-2014-3467)

  - asn1_get_bit_der() can return negative bit length.
    (CVE-2014-3468)

  - Possible DoS by NULL pointer dereference (CVE-2014-3469)

Linux/Unix 主機上安裝了一個或多個受到弱點影響的套件，且供應商未提供可用的修補程式。

  - 在 GnuTLS 3.1.25 之前的版本、3.2.15 之前的 3.2.x 版和 3.3.4 之前的 3.3.x 版中，lib/gnutls_handshake.c 的 read_server_hello 函式存在緩衝區溢位，會允許遠端伺服器透過 ServerHello 訊息中的長工作階段 ID，造成拒絕服務 (記憶體損毀) 或可能執行任意程式碼。
    (CVE-2014-3466)

請注意，Nessus 依賴供應商報告的套件存在。

Joonas Kuorilehto 發現 GnuTLS 未正確處理 Server Hello 訊息。惡意的遠端伺服器或攔截式攻擊者可利用此問題造成 GnuTLS 損毀，進而導致拒絕服務或可能執行任意程式碼。

請注意，Tenable Network Security 已直接從 Ubuntu 安全性公告擷取前述描述區塊。Tenable 已盡量在不造成其他問題的前提下，嘗試自動清理並將其格式化。

在 GnuTLS 剖析來自 TLS/SSL 交握 ServerHello 訊息的工作階段 ID 的方式中發現一個瑕疵。惡意伺服器可利用此瑕疵，傳送過長的工作階段 ID 值，進而在使用 GnuTLS 的連線 TLS/SSL 用戶端應用程式中觸發緩衝區溢位，導致用戶端應用程式損毀或可能執行任意程式碼。(CVE-2014-3466)

若要使更新生效，所有與 GnuTLS 程式庫連結的應用程式都必須重新啟動。

已新增 CVE-2014-3466 的修正

請注意，Tenable Network Security 已直接從 Fedora 安全性公告擷取前置描述區塊。Tenable 已盡量在不造成其他問題的前提下，嘗試自動清理並將其格式化。

GnuTLS 已修補，可確保於 TLS/SSL 交握期間正確剖析工作階段 id。此外，有三個繼承自 libtasn1 的問題已經修正。

如需詳細資訊，請參閱 http://www.gnutls.org/security.html#GNUTLS-SA-2014-3

已修正這些安全性問題：

- 連接期間可能發生的記憶體損毀情形。
 (CVE-2014-3466)

- 多個邊界檢查問題可允許 DoS。
 (CVE-2014-3467)

- asn1_get_bit_der() 可傳回負位元長度。
 (CVE-2014-3468)

- NULL 指標解除參照可能造成的 DoS (CVE-2014-3469)

遠端主機受到 GLSA-201406-09 中所述的弱點影響 (GnuTLS：多個弱點)

在 GnuTLS 中發現多個弱點。如需詳細資訊，請檢閱以下提及的 CVE 識別碼。
 影響：

遠端攻擊者可利用多個向量，透過特製的憑證偽造任意 SSL 伺服器、執行任意程式碼，或造成拒絕服務情況。
 因應措施：

目前尚無已知的因應措施。

gnutls 已修補，可修正兩個可用於中斷服務或可能允許執行遠端程式碼的安全性弱點。

- 連線時發生記憶體損毀 (CVE-2014-3466)

- gnutls_x509_dn_oid_name 中的 NULL 指標解除參照 (CVE-2014-3465)

The remote host is running VLC 2.x prior to 2.1.5 and is affected by multiple vulnerabilities :

 - An error exists in the 'png_push_read_chunk()' function within the file 'pngpread.c' from the included libpng library that can allow denial of service attacks. (CVE-2014-0333)
 - A buffer overflow error exists in the 'read_server_hello()' function within the file 'lib/gnutls_handshake.c' from the included GnuTLS library that can allow arbitrary code execution or denial of service. (CVE-2014-3466)
 - A heap-based buffer overflow error exists in the transcode module due to improper validation of user-supplied input when handling invalid channel counts. An attacker can exploit this to execute arbitrary code. (CVE-2014-6440)

ID	名稱	產品	系列	已發布	已更新	嚴重性
218095	Linux Distros Unpatched Vulnerability : CVE-2014-3466	Nessus	Misc.	2025/3/4	2025/3/4	high
76061	GLSA-201406-09 : GnuTLS: Multiple vulnerabilities	Nessus	Gentoo Local Security Checks	2014/6/16	2021/1/6	medium
75384	openSUSE Security Update : gnutls (openSUSE-SU-2014:0763-1)	Nessus	SuSE Local Security Checks	2014/6/13	2021/1/19	medium
74285	Ubuntu 14.04 LTS : GnuTLS vulnerability (USN-2229-1)	Nessus	Ubuntu Local Security Checks	2014/6/3	2024/8/28	critical
74306	Scientific Linux Security Update : gnutls on SL6.x i386/x86_64 (20140603)	Nessus	Scientific Linux Local Security Checks	2014/6/4	2021/1/14	medium
74316	Fedora 20 : gnutls-3.1.25-1.fc20 (2014-6891)	Nessus	Fedora Local Security Checks	2014/6/5	2021/1/11	medium
74321	SuSE 11.3 Security Update : gnutls (SAT Patch Number 9320)	Nessus	SuSE Local Security Checks	2014/6/5	2021/1/19	medium
74403	Fedora 19 : gnutls-3.1.20-5.fc19 (2014-6881)	Nessus	Fedora Local Security Checks	2014/6/10	2021/1/11	medium
218095	Linux Distros 未修補弱點：CVE-2014-3466	Nessus	Misc.	2025/3/4	2025/3/4	high
74285	Ubuntu 14.04 LTS：GnuTLS 弱點 (USN-2229-1)	Nessus	Ubuntu Local Security Checks	2014/6/3	2024/8/28	critical
74306	Scientific Linux 安全性更新：SL6.x i386/x86_64 上的 gnutls	Nessus	Scientific Linux Local Security Checks	2014/6/4	2021/1/14	medium
74316	Fedora 20：gnutls-3.1.25-1.fc20 (2014-6891)	Nessus	Fedora Local Security Checks	2014/6/5	2021/1/11	medium
74321	SuSE 11.3 安全性更新：gnutls (SAT 修補程式編號 9320)	Nessus	SuSE Local Security Checks	2014/6/5	2021/1/19	medium
74403	Fedora 19：gnutls-3.1.20-5.fc19 (2014-6881)	Nessus	Fedora Local Security Checks	2014/6/10	2021/1/11	medium
76061	GLSA-201406-09 : GnuTLS：多個弱點	Nessus	Gentoo Local Security Checks	2014/6/16	2021/1/6	medium
75384	openSUSE 安全性更新：gnutls (openSUSE-SU-2014:0763-1)	Nessus	SuSE Local Security Checks	2014/6/13	2021/1/19	medium
9265	VLC Media Player < 2.1.5 Multiple Vulnerabilities	Nessus Network Monitor	Web Clients	2015/3/22	2019/3/6	medium

偵測

搜尋 Plugin

high

medium

medium

critical

medium

medium

medium

medium

high

critical

medium

medium

medium

medium

medium

medium

medium