Threats tagged 'ghsa-7hhj-8fwv-m5hc'

A vulnerability in GnuTLS allows a remote attacker to bypass certificate validation by presenting a specially crafted certificate containing URI or SRV Subject Alternative Names (SANs). This causes the validation process to incorrectly fallback to checking DNS hostnames against the Common Name (CN), potentially enabling spoofing of legitimate services or interception of sensitive data. The issue affects specific versions of GnuTLS and has a CVSS score of 7.1, indicating high severity. Red Hat has released security updates addressing this and related vulnerabilities in GnuTLS for their Extended Life Cycle Support 7 product line.