CVE-2024-0567

See a problem?
Please try reporting it to the source first.
Source
https://cve.org/CVERecord?id=CVE-2024-0567
Import Source
https://storage.googleapis.com/osv-test-cve-osv-conversion/osv-output/CVE-2024-0567.json
JSON Data
https://api.test.osv.dev/v1/vulns/CVE-2024-0567
Downstream
ALPINE (1)
AZL (2)
BELL (1)
CLSA (7)
DEBIAN (1)
JLSEC (1)
MGASA (1)
OESA (4)
openSUSE (1)
RHSA (2)
SUSE (3)
UBUNTU (1)
Related
ALSA (1)
openSUSE (1)
SUSE (3)
Published
2024-01-16T14:01:59Z
Modified
2026-10-24T10:52:55Z
Severity
  • 7.5 (High) CVSS_V3 - CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H CVSS Calculator
Summary
Gnutls: rejects certificate chain with distributed trust
Details

A vulnerability was found in GnuTLS, where a cockpit (which uses gnuTLS) rejects a certificate chain with distributed trust. This issue occurs when validating a certificate chain with cockpit-certificate-ensure. This flaw allows an unauthenticated, remote client or attacker to initiate a denial of service attack.

Database specific 
{
    "cna_assigner": "redhat",
    "cwe_ids": [
        "CWE-347"
    ],
    "osv_generated_from": "https://github.com/CVEProject/cvelistV5/tree/main/cves/2024/0xxx/CVE-2024-0567.json",
    "unresolved_ranges": [
        {
            "extracted_events": [
                {
                    "range": [
                        {
                            "fixed": "0:3.7.6-23.el9_3.3"
                        },
                        {
                            "fixed": "0:3.7.6-23.el9_3.3"
                        },
                        {
                            "fixed": "0:3.7.6-21.el9_2.2"
                        },
                        {
                            "fixed": "v4.15.0-37"
                        },
                        {
                            "fixed": "v4.15.0-68"
                        },
                        {
                            "fixed": "v4.15.0-158"
                        },
                        {
                            "fixed": "v4.15.0-39"
                        },
                        {
                            "fixed": "v4.15.0-58"
                        },
                        {
                            "fixed": "v4.15.0-158"
                        },
                        {
                            "fixed": "v4.15.0-13"
                        },
                        {
                            "fixed": "v4.15.0-81"
                        },
                        {
                            "fixed": "v4.15.0-158"
                        },
                        {
                            "fixed": "v4.15.0-79"
                        },
                        {
                            "fixed": "v4.15.0-22"
                        },
                        {
                            "fixed": "v4.15.0-57"
                        },
                        {
                            "fixed": "v4.15.0-6"
                        },
                        {
                            "fixed": "v4.15.0-158"
                        },
                        {
                            "fixed": "v4.15.0-15"
                        },
                        {
                            "fixed": "v4.15.0-15"
                        },
                        {
                            "fixed": "v4.15.0-54"
                        },
                        {
                            "fixed": "v4.15.0-158"
                        },
                        {
                            "fixed": "v4.15.0-10"
                        },
                        {
                            "fixed": "v4.15.0-26"
                        },
                        {
                            "fixed": "v4.15.0-158"
                        },
                        {
                            "fixed": "v4.15.0-19"
                        },
                        {
                            "fixed": "v4.15.0-158"
                        },
                        {
                            "fixed": "v4.15.0-158"
                        },
                        {
                            "fixed": "v4.15.0-21"
                        },
                        {
                            "fixed": "v4.15.0-103"
                        },
                        {
                            "fixed": "v5.8.6-22"
                        },
                        {
                            "fixed": "v5.8.6-11"
                        },
                        {
                            "fixed": "v6.8.1-407"
                        },
                        {
                            "fixed": "v5.8.6-19"
                        },
                        {
                            "fixed": "v1.0.0-479"
                        },
                        {
                            "fixed": "v5.8.6-7"
                        },
                        {
                            "fixed": "v0.4.0-247"
                        },
                        {
                            "fixed": "v5.8.6-5"
                        },
                        {
                            "fixed": "v1.1.0-227"
                        },
                        {
                            "fixed": "v5.8.1-470"
                        },
                        {
                            "fixed": "v2.9.6-14"
                        },
                        {
                            "fixed": "v5.8.6-2"
                        },
                        {
                            "fixed": "v5.8.6-24"
                        },
                        {
                            "fixed": "v5.8.6-10"
                        },
                        {
                            "fixed": "v0.1.0-525"
                        },
                        {
                            "fixed": "v0.1.0-224"
                        },
                        {
                            "fixed": "v0.28.1-56"
                        }
                    ],
                    "source": "AFFECTED_FIELD",
                    "strategy": "InverseAffectedRanges"
                }
            ]
        }
    ]
}
References

Affected packages

Git / github.com/gnutls/gnutls

Affected ranges

Type
GIT
Repo
https://github.com/gnutls/gnutls
Events
Introduced
744169a4a5421f3d0be72c70e63e7de479606ced
Fixed
2f04c14daa086889b4e85f7056c39d23766ddaa1
Database specific
Show details 
{
    "extracted_events": [
        {
            "cpe": "cpe:2.3:a:gnu:gnutls:*:*:*:*:*:*:*:*",
            "range": [
                {
                    "introduced": "3.7.0"
                },
                {
                    "fixed": "3.8.3"
                }
            ],
            "source": "CPE_RANGE"
        }
    ]
}
Type
GIT
Repo
https://gitlab.com/gnutls/gnutls
Events
Introduced
df405c5e64874529b7b9dc1177165f03971dc196
Fixed
2f04c14daa086889b4e85f7056c39d23766ddaa1
Database specific
Show details 
{
    "extracted_events": [
        {
            "range": [
                {
                    "introduced": "3.8.0"
                },
                {
                    "fixed": "3.8.3"
                }
            ],
            "source": "AFFECTED_FIELD",
            "strategy": "StandardRange"
        },
        {
            "cpe": "cpe:2.3:a:gnu:gnutls:*:*:*:*:*:*:*:*",
            "range": [
                {
                    "introduced": "3.7.0"
                },
                {
                    "fixed": "3.8.3"
                }
            ],
            "source": "CPE_RANGE"
        }
    ]
}

Affected versions

3.*
3.7.0
3.7.1
3.7.2
3.7.3
3.7.4
3.7.5
3.7.7
3.7.8
3.8.0
3.8.1
3.8.2

Database specific

source 
"https://storage.googleapis.com/osv-test-cve-osv-conversion/osv-output/CVE-2024-0567.json"