CVE-2009-1416
- State
- Published
- Severity
- Not scored
- Published
- Apr 30, 2009
- Updated
- Aug 7, 2024
- Reserved
- Apr 24, 2009
Description
lib/gnutls_pk.c in libgnutls in GnuTLS 2.5.0 through 2.6.5 generates RSA keys stored in DSA structures, instead of the intended DSA keys, which might allow remote attackers to spoof signatures on certificates or have unspecified other impact by leveraging an invalid DSA key.
Scores
The record has no CVSS score.
Weaknesses
The record names no weakness.
Affected Products
| Product | Versions |
|---|---|
n/an/a |
|
References
- [help-gnutls] 20090420 Encryption using DSA keysmailing-list
- [gnutls-devel] 20090430 All DSA keys generated using GnuTLS 2.6.x are corrupt [GNUTLS-SA-2009-2] [CVE-2009-1416]mailing-list
- 1022158vdb-entry
- ADV-2009-1218vdb-entry
- 34783vdb-entry
- GLSA-200905-04vendor-advisory
- 34842third-party-advisory
- 35211third-party-advisory
- MDVSA-2009:116vendor-advisory
Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.