CVE-2015-0294: Debian Linux

High severity, CVSS 7.5. EPSS: 1.6% chance of exploitation in the next 30 days.

GnuTLS before 3.3.13 does not validate that the signature algorithms match when importing a certificate.

Affected products

• Debian Debian Linux: version 7.0 only
• GNU Gnutls: before 3.3.13 (fixed in 3.3.13)
• Red Hat Enterprise Linux: version 5.0 only; version 7.0 only

Published 2020-01-27. Last modified 2026-06-17.