CVE-2024-0567: debian debian_linux
Vulnerability summary
CVE-2024-0567 is a high (CVSS 7.5) vulnerability in debian debian_linux. EPSS estimates a 1.39% chance of exploitation in the next 30 days, higher than 71.9% of scored vulnerabilities. 2 public exploits are recorded.
Advisory lineage
Upstream 0 · Downstream 8 · Related 5Timeline
- 16-01-2024PublishedVulnerability first disclosed.
- 15-10-2026Last modifiedVulnerability information updated.
Description
A vulnerability was found in GnuTLS, where a cockpit (which uses gnuTLS) rejects a certificate chain with distributed trust. This issue occurs when validating a certificate chain with cockpit-certificate-ensure. This flaw allows an unauthenticated, remote client or attacker to initiate a denial of service attack.
CVSS metrics
5 scores · 5 sources · 1 version- OSV · AlpineEcosystem advisory · calculated7.5HighCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
- OSV · UbuntuEcosystem advisory · calculated7.5HighCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
- OSV · DebianEcosystem advisory · calculated7.5HighCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
- NVDNIST7.5HighCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
EPSS trend
Probability
1.39%
Chance of exploitation in the next 30 days
Percentile
72%
Versus all other CVEs
30-day change
-0.03 pp
From 1.42% on 19-09-2026
Known exploited
Compare KEV catalogsNot in any of the 3 tracked catalogs.
Public exploits
2 foundExploit Reference (bugzilla.redhat.com)
Maturity: unknown
Exploit Reference (gitlab.com)
Maturity: unknown
Weaknesses
CWE · root causeAffected systems
Debian2 products
- gnutls28< 3.7.9-2+deb12u2 | < 3.8.3-1
- debian_linuxEOL11.0
Alpine1 product
- gnutls≥ 3.7.0, < 3.8.3-r0
Fedoraproject1 product
- fedoraEOL38 | 39
Gnu1 product
- gnutls≥ 3.7.0, < 3.8.3
Netapp1 product
Ubuntu1 product
- gnutls28< 3.7.3-4ubuntu1.4 | < 3.8.3-1ubuntu1
6 vendors · 7 products
References
20 links- bugzilla.redhat.com/show_bug.cgi?id=2258544Issue TrackingX Refsource REDHATExploitThird Party Advisory
- www.openwall.com/lists/oss-security/2024/01/19/3X Transferred
- lists.fedoraproject.org/archives/…X Transferred
Show all 20 references
- lists.fedoraproject.org/archives/…X Transferred
- security.netapp.com/advisory/ntap-20240202-0011/X Transferred
