An issue was discovered in GnuTLS before 3.6.15. A server can trigger a NULL pointer dereference in a TLS 1.3 client if a no_renegotiation alert is sent with unexpected timing, and then an invalid second handshake occurs. The crash happens in the application's error handling path, where the gnutls_deinit function is called after detecting a handshake failure.
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade gnutls-utilsUpgrade gnutlsUpgrade gnutls-c++Upgrade gnutls-develUpgrade gnutls-dane | May 4, 2022 | Sep 4, 2020 |
| Alpine Linux | — | Upgrade gnutls | Aug 22, 2024 | Sep 4, 2020 |
| Centos_linux | — | Upgrade gnutlsUpgrade gnutls-c++-debuginfoUpgrade gnutls-utilsUpgrade gnutls-utils-debuginfoUpgrade gnutls-develUpgrade gnutls-c++Upgrade gnutls-debuginfoUpgrade gnutls-daneUpgrade gnutls-debugsourceUpgrade gnutls-dane-debuginfo | Dec 21, 2020 | Sep 4, 2020 |
| Debian | — | Upgrade gnutls28 | Jul 30, 2024 | Sep 4, 2020 |
| Freebsd | — | Upgrade gnutls | Sep 7, 2020 | Sep 6, 2020 |
| Gentoo Linux | — | Upgrade net-libs/gnutls. | Sep 8, 2020 | Sep 4, 2020 |
| Huawei Euleros 2_0_sp8 | — | Upgrade gnutls-daneUpgrade gnutls-develUpgrade gnutls-c++Upgrade gnutls-utilsUpgrade gnutls | Nov 3, 2020 | Sep 4, 2020 |
| Oracle Solaris | — | Upgrade library/gnutls-3 to version 3.6.15-11.4.28.0.1.82.1 on Solaris 11.4 | Jan 19, 2021 | Sep 4, 2020 |
| Oracle_linux | — | Upgrade gnutls-utilsUpgrade gnutls-c++Upgrade gnutls-develUpgrade gnutls-daneUpgrade gnutls | Dec 22, 2020 | Sep 4, 2020 |
| Redhat Openshift | — | Upgrade redhat-coreos | Mar 12, 2021 | Sep 4, 2020 |
| Redhat_linux | — | Upgrade gnutls-daneUpgrade gnutls-dane-debuginfoUpgrade gnutls-c++Upgrade gnutls-c++-debuginfoUpgrade gnutls-debuginfoUpgrade gnutls-utils-debuginfoUpgrade gnutlsUpgrade gnutls-utilsUpgrade gnutls-develUpgrade gnutls-debugsource | Dec 21, 2020 | Sep 4, 2020 |
| Suse | — | Upgrade libgnutls30-hmacUpgrade libgnutls-develUpgrade libgnutls30-32bitUpgrade libgnutlsxx-develUpgrade libgnutls30Upgrade gnutls-guileUpgrade gnutlsUpgrade libgnutlsxx28Upgrade libgnutls-devel-32bitUpgrade libgnutls-dane0Upgrade libgnutls-dane-develUpgrade libgnutls30-hmac-32bit | Oct 23, 2020 | Sep 4, 2020 |
| Ubuntu | — | Upgrade libgnutls30 | Sep 10, 2020 | Sep 4, 2020 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Sep 4, 2020 |
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub