diff options
| author | Archana Polampalli <archana.polampalli@windriver.com> | 2025-02-14 10:49:25 +0000 |
|---|---|---|
| committer | Steve Sakoman <steve@sakoman.com> | 2025-02-24 07:00:53 -0800 |
| commit | 07305235422e6a255665654ea89c3c734b773f3d (patch) | |
| tree | 8a7e6f4cc8a54a4e7fe6da64f846dae9fdf63041 /documentation | |
| parent | 138ab1c7df95368efdc4b79d656f9f5b16a74b25 (diff) | |
| download | poky-07305235422e6a255665654ea89c3c734b773f3d.tar.gz | |
gnutls: fix CVE-2024-12243
A flaw was found in GnuTLS, which relies on libtasn1 for ASN.1 data processing.
Due to an inefficient algorithm in libtasn1, decoding certain DER-encoded certificate
data can take excessive time, leading to increased resource consumption.
This flaw allows a remote attacker to send a specially crafted certificate, causing
GnuTLS to become unresponsive or slow, resulting in a denial-of-service condition.
(From OE-Core rev: 5fbe46de6d2e3862316cf486503f18e616c3c0a7)
Signed-off-by: Archana Polampalli <archana.polampalli@windriver.com>
Signed-off-by: Steve Sakoman <steve@sakoman.com>
Diffstat (limited to 'documentation')
0 files changed, 0 insertions, 0 deletions