CVE-2014-8564

CVE-2014-8564 describes an out-of-bounds write vulnerability in the GnuTLS library (versions 3.x before 3.1.28, 3.2.x before 3.2.20, and 3.3.x before 3.3.10), affecting products from Canonical, GNU, OpenSUSE, and Red Hat. This flaw, triggered by specially crafted ECC certificates or CSRs during key ID generation, allows remote attackers to cause a denial of service. With a CVSS score of 5.0 (AV:N/AC:L/Au:N/C:N/I:N/A:P), it is a network-exploitable vulnerability with low attack complexity, leading to potential system unavailability. There is no evidence of active exploitation, no public exploit code (Metasploit, Nuclei, ExploitDB), and minimal community discussion or media coverage, suggesting low current threat activity.