CVE-2024-0567 Gnutls: rejects certificate chain with distributed trust
A vulnerability was found in GnuTLS, where a cockpit (which uses gnuTLS) rejects a certificate chain with distributed trust. This issue occurs when validating a certificate chain with cockpit-certificate-ensure. This flaw allows an unauthenticated, remote client or attacker to initiate a denial of service attack.
Problem types: cwe_id: CWE-347
description: Improper Verification of Cryptographic Signature
Affected products: default_status: unaffected
vendor: Red Hat
product: Red Hat Enterprise Linux 9
cpes: cpe:/o:redhat:enterprise_linux:9::baseos
cpe:/a:redhat:enterprise_linux:9::appstream
default_status: affected
vendor: Red Hat
product: Red Hat Enterprise Linux 9
cpes: cpe:/o:redhat:enterprise_linux:9::baseos
cpe:/a:redhat:enterprise_linux:9::appstream
default_status: affected
vendor: Red Hat
product: Red Hat Enterprise Linux 9.2 Extended Update Support
cpes: cpe:/a:redhat:rhel_eus:9.2::appstream
cpe:/o:redhat:rhel_eus:9.2::baseos
default_status: affected
vendor: Red Hat
product: RHODF-4.15-RHEL-9
cpes: cpe:/a:redhat:openshift_data_foundation:4.15::el9
default_status: affected
vendor: Red Hat
product: RHODF-4.15-RHEL-9
cpes: cpe:/a:redhat:openshift_data_foundation:4.15::el9
default_status: affected
vendor: Red Hat
product: RHODF-4.15-RHEL-9
cpes: cpe:/a:redhat:openshift_data_foundation:4.15::el9
default_status: affected
vendor: Red Hat
product: RHODF-4.15-RHEL-9
cpes: cpe:/a:redhat:openshift_data_foundation:4.15::el9
default_status: affected
vendor: Red Hat
product: RHODF-4.15-RHEL-9
cpes: cpe:/a:redhat:openshift_data_foundation:4.15::el9
default_status: affected
vendor: Red Hat
product: RHODF-4.15-RHEL-9
cpes: cpe:/a:redhat:openshift_data_foundation:4.15::el9
default_status: affected
vendor: Red Hat
product: RHODF-4.15-RHEL-9
cpes: cpe:/a:redhat:openshift_data_foundation:4.15::el9
default_status: affected
vendor: Red Hat
product: RHODF-4.15-RHEL-9
cpes: cpe:/a:redhat:openshift_data_foundation:4.15::el9
default_status: affected
vendor: Red Hat
product: RHODF-4.15-RHEL-9
cpes: cpe:/a:redhat:openshift_data_foundation:4.15::el9
default_status: affected
vendor: Red Hat
product: RHODF-4.15-RHEL-9
cpes: cpe:/a:redhat:openshift_data_foundation:4.15::el9
default_status: affected
vendor: Red Hat
product: RHODF-4.15-RHEL-9
cpes: cpe:/a:redhat:openshift_data_foundation:4.15::el9
default_status: affected
vendor: Red Hat
product: RHODF-4.15-RHEL-9
cpes: cpe:/a:redhat:openshift_data_foundation:4.15::el9
default_status: affected
vendor: Red Hat
product: RHODF-4.15-RHEL-9
cpes: cpe:/a:redhat:openshift_data_foundation:4.15::el9
default_status: affected
vendor: Red Hat
product: RHODF-4.15-RHEL-9
cpes: cpe:/a:redhat:openshift_data_foundation:4.15::el9
default_status: affected
vendor: Red Hat
product: RHODF-4.15-RHEL-9
cpes: cpe:/a:redhat:openshift_data_foundation:4.15::el9
default_status: affected
vendor: Red Hat
product: RHODF-4.15-RHEL-9
cpes: cpe:/a:redhat:openshift_data_foundation:4.15::el9
default_status: affected
vendor: Red Hat
product: RHODF-4.15-RHEL-9
cpes: cpe:/a:redhat:openshift_data_foundation:4.15::el9
default_status: affected
vendor: Red Hat
product: RHODF-4.15-RHEL-9
cpes: cpe:/a:redhat:openshift_data_foundation:4.15::el9
default_status: affected
vendor: Red Hat
product: RHODF-4.15-RHEL-9
cpes: cpe:/a:redhat:openshift_data_foundation:4.15::el9
default_status: affected
vendor: Red Hat
product: RHODF-4.15-RHEL-9
cpes: cpe:/a:redhat:openshift_data_foundation:4.15::el9
default_status: affected
vendor: Red Hat
product: RHODF-4.15-RHEL-9
cpes: cpe:/a:redhat:openshift_data_foundation:4.15::el9
default_status: affected
vendor: Red Hat
product: RHODF-4.15-RHEL-9
cpes: cpe:/a:redhat:openshift_data_foundation:4.15::el9
default_status: affected
vendor: Red Hat
product: RHODF-4.15-RHEL-9
cpes: cpe:/a:redhat:openshift_data_foundation:4.15::el9
default_status: affected
vendor: Red Hat
product: RHODF-4.15-RHEL-9
cpes: cpe:/a:redhat:openshift_data_foundation:4.15::el9
default_status: affected
vendor: Red Hat
product: RHODF-4.15-RHEL-9
cpes: cpe:/a:redhat:openshift_data_foundation:4.15::el9
default_status: affected
vendor: Red Hat
product: RHODF-4.15-RHEL-9
cpes: cpe:/a:redhat:openshift_data_foundation:4.15::el9
default_status: affected
vendor: Red Hat
product: RHOL-5.8-RHEL-9
cpes: cpe:/a:redhat:logging:5.8::el9
default_status: affected
vendor: Red Hat
product: RHOL-5.8-RHEL-9
cpes: cpe:/a:redhat:logging:5.8::el9
default_status: affected
vendor: Red Hat
product: RHOL-5.8-RHEL-9
cpes: cpe:/a:redhat:logging:5.8::el9
default_status: affected
vendor: Red Hat
product: RHOL-5.8-RHEL-9
cpes: cpe:/a:redhat:logging:5.8::el9
default_status: affected
vendor: Red Hat
product: RHOL-5.8-RHEL-9
cpes: cpe:/a:redhat:logging:5.8::el9
default_status: affected
vendor: Red Hat
product: RHOL-5.8-RHEL-9
cpes: cpe:/a:redhat:logging:5.8::el9
default_status: affected
vendor: Red Hat
product: RHOL-5.8-RHEL-9
cpes: cpe:/a:redhat:logging:5.8::el9
default_status: affected
vendor: Red Hat
product: RHOL-5.8-RHEL-9
cpes: cpe:/a:redhat:logging:5.8::el9
default_status: affected
vendor: Red Hat
product: RHOL-5.8-RHEL-9
cpes: cpe:/a:redhat:logging:5.8::el9
default_status: affected
vendor: Red Hat
product: RHOL-5.8-RHEL-9
cpes: cpe:/a:redhat:logging:5.8::el9
default_status: affected
vendor: Red Hat
product: RHOL-5.8-RHEL-9
cpes: cpe:/a:redhat:logging:5.8::el9
default_status: affected
vendor: Red Hat
product: RHOL-5.8-RHEL-9
cpes: cpe:/a:redhat:logging:5.8::el9
default_status: affected
vendor: Red Hat
product: RHOL-5.8-RHEL-9
cpes: cpe:/a:redhat:logging:5.8::el9
default_status: affected
vendor: Red Hat
product: RHOL-5.8-RHEL-9
cpes: cpe:/a:redhat:logging:5.8::el9
default_status: affected
vendor: Red Hat
product: RHOL-5.8-RHEL-9
cpes: cpe:/a:redhat:logging:5.8::el9
default_status: affected
vendor: Red Hat
product: RHOL-5.8-RHEL-9
cpes: cpe:/a:redhat:logging:5.8::el9
default_status: affected
vendor: Red Hat
product: RHOL-5.8-RHEL-9
cpes: cpe:/a:redhat:logging:5.8::el9
default_status: affected
vendor: Red Hat
product: Red Hat Enterprise Linux 6
cpes: cpe:/o:redhat:enterprise_linux:6
default_status: unknown
vendor: Red Hat
product: Red Hat Enterprise Linux 7
cpes: cpe:/o:redhat:enterprise_linux:7
default_status: unknown
vendor: Red Hat
product: Red Hat Enterprise Linux 7
cpes: cpe:/o:redhat:enterprise_linux:7
default_status: unknown
vendor: Red Hat
product: Red Hat Enterprise Linux 8
cpes: cpe:/o:redhat:enterprise_linux:8
default_status: unaffected
vendor: Red Hat
product: Red Hat Enterprise Linux 8
cpes: cpe:/o:redhat:enterprise_linux:8
default_status: unaffected
vendor: Red Hat
product: Red Hat Enterprise Linux 9
cpes: cpe:/o:redhat:enterprise_linux:9
default_status: unaffected
vendor: Red Hat
product: Red Hat OpenShift Container Platform 3.11
cpes: cpe:/a:redhat:openshift:3.11
default_status: unaffected
CVSS v3.1: attackComplexity: LOW
attackVector: NETWORK
availabilityImpact: HIGH
baseScore: 7.5
baseSeverity: HIGH
confidentialityImpact: NONE
integrityImpact: NONE
privilegesRequired: NONE
scope: UNCHANGED
userInteraction: NONE
vectorString: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
version: 3.1
Published: 2024-01-16T14:01:59.178Z