A vulnerability was found in GnuTLS, where a cockpit ...
Moderate severity
Unreviewed
Published
Jan 16, 2024
to the GitHub Advisory Database
•
Updated Mar 5, 2024
Description
Published by the National Vulnerability Database
Jan 16, 2024
Published to the GitHub Advisory Database
Jan 16, 2024
Last updated
Mar 5, 2024
A vulnerability was found in GnuTLS, where a cockpit (which uses gnuTLS) rejects a certificate chain with distributed trust. This issue occurs when validating a certificate chain with cockpit-certificate-ensure. This flaw allows an unauthenticated, remote client or attacker to initiate a denial of service attack.
References