CVE-2014-8155: GnuTLS before 2.9.10 does not verify the activation and expiration dates of CA certificates, which allows m...

Security readout for executives and security teams

Older GnuTLS versions could trust a server certificate chain even when the issuing CA certificate was not yet valid or had expired. A network-positioned attacker could use that weakness to impersonate servers. The bundle does not show active exploitation or a CVSS score. Exposure is most likely on legacy systems, appliances, or applications using GnuTLS before 2.9.10 or vendor packages based on affected GnuTLS code. Treat this as a legacy TLS trust weakness. It is not shown as actively exploited, but affected systems can undermine encrypted sessions if an attacker can intercept traffic. Prioritize internet-facing and sensitive internal clients still running old GnuTLS builds. Mitigation focus: Inventory systems and applications that use GnuTLS.; Upgrade GnuTLS to 2.9.10 or later where supported.; Apply vendor-supported fixed packages, including relevant Red Hat advisories where applicable..

Prepared

Jun 13, 2026, 22:22 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.