CVE-2015-6251 is a double free vulnerability affecting GnuTLS versions before 3.3.17 and 3.4.x before 3.4.4, specifically impacting Debian Linux and GnuTLS products. This vulnerability allows remote attackers to trigger a denial of service by providing an excessively long DistinguishedName entry within a certificate. With a CVSS score of 5.0, it is a medium-severity vulnerability requiring no authentication, with low attack complexity, and its primary impact is availability. There is no evidence of active exploitation, no known public exploit code (Metasploit, Nuclei, ExploitDB), and it has received minimal community discussion and media coverage, indicating low current attention.
| Vendor | Product | Version(s) | CPE |
|---|---|---|---|
3.3.0CPE matchmatch criteria | cpe:2.3:a:gnu:gnutls:3.3.0:-:*:*:*:*:*:* | ||
3.3.0CPE matchmatch criteria | cpe:2.3:a:gnu:gnutls:3.3.0:pre0:*:*:*:*:*:* | ||
3.3.1CPE matchmatch criteria | cpe:2.3:a:gnu:gnutls:3.3.1:*:*:*:*:*:*:* | ||
3.3.2CPE matchmatch criteria | cpe:2.3:a:gnu:gnutls:3.3.2:*:*:*:*:*:*:* | ||
3.3.3CPE matchmatch criteria | cpe:2.3:a:gnu:gnutls:3.3.3:*:*:*:*:*:*:* |
CVSS version used by this source: 2.0
AV:N/AC:L/Au:N/C:N/I:N/A:P
No social media mentions found for this CVE.
The average CVE in this peer group has 0.0 Twitter, 0.0 Reddit, 0.1 Bluesky, 0.0 Mastodon, and 0.4 GitHub mentions.
The average CVE in this peer group has 0.0 InfoSec Media, 0.0 Vendor Blog, and 0.0 Security Researcher mentions.