CVE-2013-2116

CVE-2013-2116 describes a denial-of-service vulnerability in GnuTLS versions up to 2.12.23, specifically within the _gnutls_ciphertext2compressed function, which can be triggered by a remote attacker providing a malformed padding length. This flaw, potentially an incomplete fix for CVE-2013-0169, results in a buffer over-read and subsequent application crash. With a CVSS score of 5.0, it is considered a medium-severity vulnerability, requiring no authentication and having low attack complexity, but only leading to a denial of service. There is no evidence of active exploitation, nor are there publicly available exploits in Metasploit, Nuclei, or ExploitDB, despite some community discussion and media coverage.