Search

Find a vulnerability

Search criteria ⓘ Use this form to refine search results.
Full-text search supports keyword queries with ranking and filtering.
You can combine vendor, product, and sources to narrow results.
Enable “Apply ordering” to sort by date instead of relevance.

    Related vulnerabilities

    USN-2540-1 (UBUNTU-CVE-2014-8155)

    Vulnerability from osv_ubuntu – Published: 2015-03-23 19:13 – Updated: 2026-04-22 07:36 – Source website
    VLAI
    Summary
    gnutls26, gnutls28 vulnerabilities
    Details

    It was discovered that GnuTLS did not perform date and time checks on CA certificates, contrary to expectations. This issue only affected Ubuntu 10.04 LTS. (CVE-2014-8155)

    Nikos Mavrogiannopoulos discovered that GnuTLS incorrectly verified that signature algorithms matched. A remote attacker could possibly use this issue to downgrade to a disallowed algorithm. This issue only affected Ubuntu 10.04 LTS, Ubuntu 12.04 LTS and Ubuntu 14.04 LTS. (CVE-2015-0282)

    It was discovered that GnuTLS incorrectly verified certificate algorithms. A remote attacker could possibly use this issue to downgrade to a disallowed algorithm. (CVE-2015-0294)

    References
    To clipboard 

    {
  "affected": [
    {
      "database_specific": {
        "cves_map": {
          "cves": [
            {
              "id": "CVE-2015-0282",
              "severity": [
                {
                  "score": "medium",
                  "type": "Ubuntu"
                }
              ]
            },
            {
              "id": "CVE-2015-0294",
              "severity": [
                {
                  "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N",
                  "type": "CVSS_V3"
                },
                {
                  "score": "low",
                  "type": "Ubuntu"
                }
              ]
            }
          ],
          "ecosystem": "Ubuntu:14.04:LTS"
        }
      },
      "ecosystem_specific": {
        "availability": "No subscription required",
        "binaries": [
          {
            "binary_name": "gnutls-bin",
            "binary_version": "3.0.11+really2.12.23-12ubuntu2.2"
          },
          {
            "binary_name": "libgnutls-openssl27",
            "binary_version": "2.12.23-12ubuntu2.2"
          },
          {
            "binary_name": "libgnutls26",
            "binary_version": "2.12.23-12ubuntu2.2"
          },
          {
            "binary_name": "libgnutlsxx27",
            "binary_version": "2.12.23-12ubuntu2.2"
          }
        ]
      },
      "package": {
        "ecosystem": "Ubuntu:14.04:LTS",
        "name": "gnutls26",
        "purl": "pkg:deb/ubuntu/gnutls26@2.12.23-12ubuntu2.2?arch=source\u0026distro=trusty"
      },
      "ranges": [
        {
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "2.12.23-12ubuntu2.2"
            }
          ],
          "type": "ECOSYSTEM"
        }
      ],
      "versions": [
        "2.12.23-1ubuntu4",
        "2.12.23-1ubuntu5",
        "2.12.23-12ubuntu1",
        "2.12.23-12ubuntu2",
        "2.12.23-12ubuntu2.1"
      ]
    }
  ],
  "aliases": [],
  "details": "It was discovered that GnuTLS did not perform date and time checks on\nCA certificates, contrary to expectations. This issue only affected\nUbuntu 10.04 LTS. (CVE-2014-8155)\n\nNikos Mavrogiannopoulos discovered that GnuTLS incorrectly verified that\nsignature algorithms matched. A remote attacker could possibly use this\nissue to downgrade to a disallowed algorithm. This issue only affected\nUbuntu 10.04 LTS, Ubuntu 12.04 LTS and Ubuntu 14.04 LTS. (CVE-2015-0282)\n\nIt was discovered that GnuTLS incorrectly verified certificate algorithms.\nA remote attacker could possibly use this issue to downgrade to a\ndisallowed algorithm. (CVE-2015-0294)\n",
  "id": "USN-2540-1",
  "modified": "2026-04-22T07:36:32Z",
  "published": "2015-03-23T19:13:13Z",
  "references": [
    {
      "type": "ADVISORY",
      "url": "https://ubuntu.com/security/notices/USN-2540-1"
    },
    {
      "type": "REPORT",
      "url": "https://ubuntu.com/security/CVE-2014-8155"
    },
    {
      "type": "REPORT",
      "url": "https://ubuntu.com/security/CVE-2015-0282"
    },
    {
      "type": "REPORT",
      "url": "https://ubuntu.com/security/CVE-2015-0294"
    }
  ],
  "related": [],
  "schema_version": "1.7.0",
  "summary": "gnutls26, gnutls28 vulnerabilities",
  "upstream": [
    "UBUNTU-CVE-2014-8155",
    "UBUNTU-CVE-2015-0282",
    "UBUNTU-CVE-2015-0294"
  ]
}