CVE ID:	CVE-2012-1573
Description:	gnutls_cipher.c in libgnutls in GnuTLS before 2.12.17 and 3.x before 3.0.15 does not properly handle data encrypted with a block cipher, which allows remote attackers to cause a denial of service (heap memory corruption and application crash) via a crafted record, as demonstrated by a crafted GenericBlockCipher structure.
Test IDs:	1.3.6.1.4.1.25623.1.0.71208   1.3.6.1.4.1.25623.1.0.71244   1.3.6.1.4.1.25623.1.0.71294   1.3.6.1.4.1.25623.1.0.72026   1.3.6.1.4.1.25623.1.0.123945   1.3.6.1.4.1.25623.1.0.123946   1.3.6.1.4.1.25623.1.0.831635   1.3.6.1.4.1.25623.1.0.870579   1.3.6.1.4.1.25623.1.0.864107   1.3.6.1.4.1.25623.1.0.881198   1.3.6.1.4.1.25623.1.1.4.2014.0320.1
Cross References:	Common Vulnerability Exposure (CVE) ID: CVE-2012-1573 BugTraq ID: 52667 http://www.securityfocus.com/bid/52667 Bugtraq: 20120320 Mu Dynamics, Inc. Security Advisories MU-201202-01 and MU-201202-02 for GnuTLS and Libtasn1 (Google Search) http://archives.neohapsis.com/archives/bugtraq/2012-03/0099.html Debian Security Information: DSA-2441 (Google Search) http://www.debian.org/security/2012/dsa-2441 http://lists.fedoraproject.org/pipermail/package-announce/2012-April/077071.html http://lists.fedoraproject.org/pipermail/package-announce/2012-March/076496.html http://www.mandriva.com/security/advisories?name=MDVSA-2012:040 http://blog.mudynamics.com/2012/03/20/gnutls-and-libtasn1-vulns/ http://article.gmane.org/gmane.comp.encryption.gpg.gnutls.devel/5910 http://article.gmane.org/gmane.comp.encryption.gpg.gnutls.devel/5912 http://www.openwall.com/lists/oss-security/2012/03/21/4 http://www.openwall.com/lists/oss-security/2012/03/21/5 http://osvdb.org/80259 RedHat Security Advisories: RHSA-2012:0429 http://rhn.redhat.com/errata/RHSA-2012-0429.html RedHat Security Advisories: RHSA-2012:0488 http://rhn.redhat.com/errata/RHSA-2012-0488.html RedHat Security Advisories: RHSA-2012:0531 http://rhn.redhat.com/errata/RHSA-2012-0531.html http://www.securitytracker.com/id?1026828 http://secunia.com/advisories/48488 http://secunia.com/advisories/48511 http://secunia.com/advisories/48596 http://secunia.com/advisories/48712 http://secunia.com/advisories/57260 SuSE Security Announcement: SUSE-SU-2014:0320 (Google Search) http://lists.opensuse.org/opensuse-security-announce/2014-03/msg00001.html http://www.ubuntu.com/usn/USN-1418-1