CVE-2015-6251
CVE-2015-6251 is a medium-severity vulnerability in Gnu Gnutls with a CVSS 2.0 base score of 5.0. Its EPSS exploit-prediction score of 19% places it in the 97th percentile, indicating an elevated likelihood of exploitation.
Key facts
- Severity: Medium (CVSS 2.0 base score 5.0)
- EPSS exploit prediction: 19% (97th percentile)
- Actively exploited: Not listed in CISA KEV
- Affected product: Gnu Gnutls
- Published:
- Last modified:
Description
Double free vulnerability in GnuTLS before 3.3.17 and 3.4.x before 3.4.4 allows remote attackers to cause a denial of service via a long DistinguishedName (DN) entry in a certificate.
Frequently asked questions
- What is CVE-2015-6251?
- Double free vulnerability in GnuTLS before 3.3.17 and 3.4.x before 3.4.4 allows remote attackers to cause a denial of service via a long DistinguishedName (DN) entry in a certificate.
- How severe is CVE-2015-6251?
- CVE-2015-6251 has a CVSS 2.0 base score of 5.0, rated medium severity.
- Is CVE-2015-6251 being actively exploited?
- It is not currently listed in CISA's KEV catalog. Its EPSS exploit-prediction score is 19% (97th percentile), an estimate of the probability of exploitation in the next 30 days.
- What products are affected by CVE-2015-6251?
- CVE-2015-6251 primarily affects Gnu Gnutls. In total, 23 product configurations (CPEs) are listed as vulnerable; see the affected-products list for the exact versions.
- How do I fix CVE-2015-6251?
- Review the linked vendor and NVD advisories for patched versions and mitigations, then upgrade or apply the recommended workaround.
- When was CVE-2015-6251 published?
- CVE-2015-6251 was published on 2015-08-24 and last updated on 2026-06-17.
References
- http://lists.fedoraproject.org/pipermail/package-announce/2015-September/165286.html
- http://lists.opensuse.org/opensuse-updates/2015-09/msg00001.html
- http://www.debian.org/security/2015/dsa-3334
- http://www.gnutls.org/security.html#GNUTLS-SA-2015-3
- http://www.openwall.com/lists/oss-security/2015/08/10/1
- http://www.openwall.com/lists/oss-security/2015/08/17/6
- http://www.securityfocus.com/bid/76267
- http://www.securitytracker.com/id/1033226
- https://bugzilla.redhat.com/show_bug.cgi?id=1251902
- https://gitlab.com/gnutls/gnutls/commit/272854367efc130fbd4f1a51840d80c630214e12
Affected products (23)
- cpe:2.3:a:gnu:gnutls:3.3.0:-:*:*:*:*:*:*
- cpe:2.3:a:gnu:gnutls:3.3.0:pre0:*:*:*:*:*:*
- cpe:2.3:a:gnu:gnutls:3.3.1:*:*:*:*:*:*:*
- cpe:2.3:a:gnu:gnutls:3.3.2:*:*:*:*:*:*:*
- cpe:2.3:a:gnu:gnutls:3.3.3:*:*:*:*:*:*:*
- cpe:2.3:a:gnu:gnutls:3.3.4:*:*:*:*:*:*:*
- cpe:2.3:a:gnu:gnutls:3.3.5:*:*:*:*:*:*:*
- cpe:2.3:a:gnu:gnutls:3.3.6:*:*:*:*:*:*:*
- cpe:2.3:a:gnu:gnutls:3.3.7:*:*:*:*:*:*:*
- cpe:2.3:a:gnu:gnutls:3.3.8:*:*:*:*:*:*:*
- cpe:2.3:a:gnu:gnutls:3.3.9:*:*:*:*:*:*:*
- cpe:2.3:a:gnu:gnutls:3.3.10:*:*:*:*:*:*:*
- cpe:2.3:a:gnu:gnutls:3.3.11:*:*:*:*:*:*:*
- cpe:2.3:a:gnu:gnutls:3.3.12:*:*:*:*:*:*:*
- cpe:2.3:a:gnu:gnutls:3.3.13:*:*:*:*:*:*:*
- cpe:2.3:a:gnu:gnutls:3.3.14:*:*:*:*:*:*:*
- cpe:2.3:a:gnu:gnutls:3.3.15:*:*:*:*:*:*:*
- cpe:2.3:a:gnu:gnutls:3.3.16:*:*:*:*:*:*:*
- cpe:2.3:a:gnu:gnutls:3.4.0:*:*:*:*:*:*:*
- cpe:2.3:a:gnu:gnutls:3.4.1:*:*:*:*:*:*:*
- cpe:2.3:a:gnu:gnutls:3.4.2:*:*:*:*:*:*:*
- cpe:2.3:a:gnu:gnutls:3.4.3:*:*:*:*:*:*:*
- cpe:2.3:o:debian:debian_linux:8.0:*:*:*:*:*:*:*
More vulnerabilities in Gnu Gnutls
- CVE-2008-1948 — Critical (CVSS 10.0): The _gnutls_server_name_recv_params function in lib/ext_server_name.c in libgnutls in gnutls-serv in GnuTLS before…
- CVE-2021-20232 — Critical (CVSS 9.8): A flaw was found in gnutls. A use after free issue in client_send_params in lib/ext/pre_shared_key.c may lead to memory…
- CVE-2021-20231 — Critical (CVSS 9.8): A flaw was found in gnutls. A use after free issue in client sending key_share extension may lead to memory corruption…
- CVE-2017-5337 — Critical (CVSS 9.8): Multiple heap-based buffer overflows in the read_attribute function in GnuTLS before 3.3.26 and 3.5.x before 3.5.8…
- CVE-2017-5336 — Critical (CVSS 9.8): Stack-based buffer overflow in the cdk_pk_get_keyid function in lib/opencdk/pubkey.c in GnuTLS before 3.3.26 and 3.5.x…
- CVE-2017-5334 — Critical (CVSS 9.8): Double free vulnerability in the gnutls_x509_ext_import_proxy function in GnuTLS before 3.3.26 and 3.5.x before 3.5.8…