ZeroDay Findings
Sign inSign up

Findings

CVE-2024-0567

A vulnerability was found in GnuTLS, where a cockpit (which uses gnuTLS) rejects a certificate chain with distributed trust.

Published Jan 16, 2024 · updated Oct 15, 2026 · gnu gnutls

A vulnerability was found in GnuTLS, where a cockpit (which uses gnuTLS) rejects a certificate chain with distributed trust. This issue occurs when validating a certificate chain with cockpit-certificate-ensure. This flaw allows an unauthenticated, remote client or attacker to initiate a denial of service attack.

Timeline

Detection, updates, and resolution for this record.

  1. Jan 16, 2024 · NIST NVD

    Detected

    A vulnerability was found in GnuTLS, where a cockpit (which uses gnuTLS) rejects a certificate chain with distributed trust. This issue occurs when validating a certificate chain with cockpit-certificate-ensure. This flaw allows an unauthenticated, remote client or attacker to initiate a denial of service attack.

  2. Oct 15, 2026 · NIST NVD

    Updated

    A vulnerability was found in GnuTLS, where a cockpit (which uses gnuTLS) rejects a certificate chain with distributed trust. This issue occurs when validating a certificate chain with cockpit-certificate-ensure. This flaw allows an unauthenticated, remote client or attacker to initiate a denial of service attack.

Affected

  • cpe debian/debian linux11.0
  • cpe fedoraproject/fedora38
  • cpe fedoraproject/fedora39
  • cpe gnu/gnutlsversion unspecified
  • cpe netapp/active iq unified managerversion unspecified

Sources

  • CVE.orgCVE-2024-0567

    Official CVE identifier

    cve.org
  • NIST NVDCVE-2024-0567

    A vulnerability was found in GnuTLS, where a cockpit (which uses gnuTLS) rejects a certificate chain with distributed trust. This issue occurs when validating a certificate chain with cockpit-certificate-ensure. This flaw allows an unauthenticated, remote client or attacker to in

    nvd.nist.gov

References