[v2.5] gnutls: gnutls_x509_dn_oid_name NULL pointer dereference (CVE-2014-3465)
A NULL pointer dereference flaw was discovered in GnuTLS’s gnutls_x509_dn_oid_name(). The function, when called with the GNUTLS_X509_DN_OID_RETURN_OID flag, should not return NULL to its caller. However, it could previously return NULL when parsed X.509 certificates included specific OIDs.
The issue was corrected upstream using the following commit:
https://www.gitorious.org/gnutls/gnutls/commit/d3648ebb04b650e6d20a2ec1fb839256b30b9fc6
The fix was first included in upstream versions 3.1.20 and 3.2.10:
http://thread.gmane.org/gmane.comp.encryption.gpg.gnutls.devel/7251
http://thread.gmane.org/gmane.comp.encryption.gpg.gnutls.devel/7250
Affected function was introduced in GnuTLS version 3.0:
http://gnutls.org/manual/html\_node/X509-certificate-API.html\#gnutls\_005fx509\_005fdn\_005foid\_005fname-1
(from redmine: issue id 3015, created on 2014-06-09, closed on 2014-06-19)
- Relations:
- parent #3014 (closed)