[v3.0] gnutls: gnutls_x509_dn_oid_name NULL pointer dereference (CVE-2014-3465)
A NULL pointer dereference flaw was discovered in GnuTLS’s gnutls_x509_dn_oid_name(). The function, when called with the GNUTLS_X509_DN_OID_RETURN_OID flag, should not return NULL to its caller. However, it could previously return NULL when parsed X.509 certificates included specific OIDs.
The issue was corrected upstream using the following commit:
The fix was first included in upstream versions 3.1.20 and 3.2.10:
Affected function was introduced in GnuTLS version 3.0:
(from redmine: issue id 3018, created on 2014-06-09, closed on 2014-06-19)
- parent #3014 (closed)