Veille CVE

Vendredi 23 octobre 2026

4 CVE

Critique 0 Élevée 0 Moyenne 4 Faible 0 Non évaluée 0 Exploitées (KEV) Tri : plus récentes « Siemens SIPLUS S7-1500 CPU 1518-4 PN/DP MFP » ✕
  1. CVE-2024-28834 5.3 Moyenne

    Red Hat Enterprise Linux 8 · Red Hat Enterprise Linux 8.6 Extended Update Support · Red Hat Enterprise Linux 8.8 Extended Update Support · Red Hat Enterprise Linux 9

    A flaw was found in GnuTLS. The Minerva attack is a cryptographic vulnerability that exploits deterministic behavior in systems like GnuTLS, leading to side-channel leaks. In specific scenarios, such as when using the GNUTLS_PRIVKEY_FLAG_REPRODUCIBLE flag, it can result in a noticeable step in nonce size from 513 to 512 bits, exposing a potential timing side-channel.

  2. CVE-2024-28835 5.0 Moyenne

    Red Hat Enterprise Linux 9 · Red Hat Enterprise Linux 9.2 Extended Update Support · Red Hat Enterprise Linux 10 · Red Hat Enterprise Linux 6

    A flaw has been discovered in GnuTLS where an application crash can be induced when attempting to verify a specially crafted .pem bundle using the "certtool --verify-chain" command.

  3. CVE-2024-12243 5.3 Moyenne

    Red Hat Enterprise Linux 8 · Red Hat Enterprise Linux 9 · Red Hat Enterprise Linux 9.2 Update Services for SAP Solutions · Red Hat Enterprise Linux 9.4 Extended Update Support

    A flaw was found in GnuTLS, which relies on libtasn1 for ASN.1 data processing. Due to an inefficient algorithm in libtasn1, decoding certain DER-encoded certificate data can take excessive time, leading to increased resource consumption. This flaw allows a remote attacker to send a specially crafted certificate, causing GnuTLS to become unresponsive or slow, resulting in a denial-of-service condition.

  4. CVE-2024-12133 5.3 Moyenne

    Red Hat Enterprise Linux 8 · Red Hat Enterprise Linux 8.4 Advanced Mission Critical Update Support · Red Hat Enterprise Linux 8.4 Extended Update Support Long-Life Add-On · Red Hat Enterprise Linux 8.6 Advanced Mission Critical Update Support

    A flaw in libtasn1 causes inefficient handling of specific certificate data. When processing a large number of elements in a certificate, libtasn1 takes much longer than expected, which can slow down or even crash the system. This flaw allows an attacker to send a specially crafted certificate, causing a denial of service attack.