CVE-2004-2531: GNU Gnutls

High severity, CVSS 7.8. EPSS: 1.7% chance of exploitation in the next 30 days.

X.509 Certificate Signature Verification in Gnu transport layer security library (GnuTLS) 1.0.16 allows remote attackers to cause a denial of service (CPU consumption) via certificates containing long chains and signed with large RSA keys.

Affected products

• GNU Gnutls: version 1.0.16 only

Published 2004-12-31. Last modified 2026-06-16.