Security Advisory

CVE-2024-0567

CVE vulnerability detail — eXtreme Datacenter Security Operations

Published 2024-01-16 14:01:59
Last updated 2025-11-20 18:09:19
Assigner redhat
State PUBLISHED

Description

A vulnerability was found in GnuTLS, where a cockpit (which uses gnuTLS) rejects a certificate chain with distributed trust. This issue occurs when validating a certificate chain with cockpit-certificate-ensure. This flaw allows an unauthenticated, remote client or attacker to initiate a denial of service attack.