CVE-2014-3465: The gnutls_x509_dn_oid_name function in lib/x509/common.c in GnuTLS 3.0 before 3.1.20 and 3.2.x before 3.2....

Security readout for executives and security teams

This flaw can let a remote party crash software using vulnerable GnuTLS when it processes a specially crafted X.509 certificate. The known impact is denial of service, not data theft or code execution. Business risk is highest where vulnerable GnuTLS versions support internet-facing TLS, certificate inspection, or authentication workflows. Exposure is most likely in systems or applications linked against vulnerable GnuTLS versions that parse or print X.509 certificate distinguished names, especially network services handling untrusted certificates. The bundle does not provide CPEs, package lists, or a complete downstream affected-product matrix. Treat this as a targeted availability risk. It is not described as data compromise, but exposed services using vulnerable GnuTLS could be crashed. Remediate during normal security patching, faster for externally reachable authentication, proxy, mail, VPN, or certificate-processing systems. Mitigation focus: Upgrade GnuTLS to 3.1.20, 3.2.10, or a vendor-patched downstream package.; Prioritize internet-facing services that parse client, server, or intermediary X.509 certificates.; Check Red Hat, openSUSE, or your OS vendor advisory for package-specific fixes..

Prepared

Jun 14, 2026, 14:16 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.