gnutls
Page content
- Author: kikadf
- Vulnerable: 2.12.17-2arcturus1
- Unaffected: 2.12.17-2arcturus2
Joonas Kuorilehto discovered that GNU TLS performed insufficient validation of session IDs during TLS/SSL handshakes. A malicious server could use this to execute arbitrary code or perform denial of service.