gnutls (SUSE:Linux Enterprise Server 12) — known CVEs & security advisories

Known CVE vulnerabilities and GitHub Security Advisories affecting the SUSE:Linux Enterprise Server 12 package gnutls, with affected version ranges, CVSS severity, EPSS exploit prediction, and CISA KEV status.

CVEs (3)

• CVE-2015-0294 — CVSS 7.5 (high): GnuTLS before 3.3.13 does not validate that the signature algorithms match when importing a certificate.
• CVE-2015-6251 — CVSS 5.0 (medium): Double free vulnerability in GnuTLS before 3.3.17 and 3.4.x before 3.4.4 allows remote attackers to cause a denial of service via a long…
• CVE-2015-3622 — CVSS 4.3 (medium): The _asn1_extract_der_octet function in lib/decoding.c in GNU Libtasn1 before 4.5 allows remote attackers to cause a denial of service…