Vulnerability Database

300,214

Total vulnerabilities in the database

CVE-2015-6251

Double free vulnerability in GnuTLS before 3.3.17 and 3.4.x before 3.4.4 allows remote attackers to cause a denial of service via a long DistinguishedName (DN) entry in a certificate.

  • Published: Aug 24, 2015
  • Updated: Nov 9, 2025
  • CVE: CVE-2015-6251
  • Severity: Medium
  • Exploit:

CVSS v2:

  • Severity: Medium
  • Score: 5
  • AV:N/AC:L/Au:N/C:N/I:N/A:P

No CWE or OWASP classifications available.

Software From Fixed in
gnu / gnutls 3.3.16 3.3.16.x
gnu / gnutls 3.3.15 3.3.15.x
gnu / gnutls 3.3.9 3.3.9.x
gnu / gnutls 3.3.10 3.3.10.x
gnu / gnutls 3.3.4 3.3.4.x
gnu / gnutls 3.4.1 3.4.1.x
gnu / gnutls 3.4.3 3.4.3.x
gnu / gnutls 3.3.1 3.3.1.x
gnu / gnutls 3.3.0-pre0 3.3.0-pre0.x
gnu / gnutls 3.3.3 3.3.3.x
gnu / gnutls 3.3.13 3.3.13.x
gnu / gnutls 3.3.7 3.3.7.x
gnu / gnutls 3.3.6 3.3.6.x
gnu / gnutls 3.4.2 3.4.2.x
gnu / gnutls 3.3.0 3.3.0.x
gnu / gnutls 3.3.12 3.3.12.x
gnu / gnutls 3.3.5 3.3.5.x
gnu / gnutls 3.4.0 3.4.0.x
gnu / gnutls 3.3.8 3.3.8.x
gnu / gnutls 3.3.14 3.3.14.x
gnu / gnutls 3.3.11 3.3.11.x
gnu / gnutls 3.3.2 3.3.2.x
debian / debian_linux 8.0 8.0.x