A flaw was found in gnutls. A use after free issue in client_send_params in lib/ext/pre_shared_key.c may lead to memory corruption and other potential consequences.
CVSS Details
- CVSS 3.1 Base Score: 9.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade nettle-develUpgrade gnutls-daneUpgrade gnutls-develUpgrade gnutlsUpgrade nettleUpgrade gnutls-utilsUpgrade gnutls-c++ | May 4, 2022 | Mar 12, 2021 |
| Alpine Linux | — | Upgrade gnutls | Jun 17, 2022 | Mar 12, 2021 |
| Arch Linux | — | Upgrade to the latest version of Arch Linux | Jul 11, 2025 | Mar 12, 2021 |
| Centos_linux | — | Upgrade gnutls-develUpgrade gnutls-daneUpgrade gnutls-debuginfoUpgrade gnutlsUpgrade gnutls-c++-debuginfoUpgrade nettle-debugsourceUpgrade nettleUpgrade gnutls-utils-debuginfoUpgrade gnutls-utilsUpgrade gnutls-c++Upgrade nettle-debuginfoUpgrade gnutls-debugsourceUpgrade nettle-develUpgrade gnutls-dane-debuginfo | Nov 10, 2021 | Mar 12, 2021 |
| Debian | — | Upgrade gnutls28 | Jul 30, 2024 | Mar 12, 2021 |
| Huawei Euleros 2_0_sp8 | — | Upgrade gnutls-develUpgrade gnutls-c++Upgrade gnutls-daneUpgrade gnutlsUpgrade gnutls-utils | Nov 2, 2021 | Mar 12, 2021 |
| Huawei Euleros 2_0_sp9 | — | Upgrade gnutlsUpgrade gnutls-utils | Aug 10, 2021 | Mar 12, 2021 |
| Oracle Solaris | — | Upgrade library/gnutls-3 to version 3.7.1-11.4.36.0.1.101.0 on Solaris 11.4 | Aug 27, 2021 | Mar 12, 2021 |
| Oracle_linux | — | Upgrade gnutls-c++Upgrade nettleUpgrade nettle-develUpgrade gnutls-utilsUpgrade gnutls-daneUpgrade gnutlsUpgrade gnutls-devel | Nov 17, 2021 | Mar 12, 2021 |
| Redhat_linux | — | Upgrade gnutlsUpgrade gnutls-c++-debuginfoUpgrade gnutls-utilsUpgrade gnutls-debuginfoUpgrade nettle-develUpgrade gnutls-c++Upgrade nettleUpgrade nettle-debuginfoUpgrade gnutls-debugsourceUpgrade gnutls-utils-debuginfoUpgrade nettle-debugsourceUpgrade gnutls-develUpgrade gnutls-dane-debuginfoUpgrade gnutls-dane | Nov 10, 2021 | Mar 12, 2021 |
| Rocky_linux | — | Upgrade nettle-debugsourceUpgrade gnutls-develUpgrade gnutlsUpgrade nettle-develUpgrade gnutls-utils-debuginfoUpgrade nettle-debuginfoUpgrade gnutls-c++Upgrade gnutls-dane-debuginfoUpgrade gnutls-daneUpgrade gnutls-debuginfoUpgrade gnutls-utilsUpgrade gnutls-c++-debuginfoUpgrade gnutls-debugsourceUpgrade nettle | Mar 12, 2024 | Mar 12, 2021 |
| Suse | — | Upgrade libgnutls-devel-32bitUpgrade gnutlsUpgrade libgnutls-dane-develUpgrade gnutls-guileUpgrade libgnutls30-32bitUpgrade libgnutls-dane0Upgrade libgnutls-develUpgrade libgnutlsxx-develUpgrade libgnutls30Upgrade libgnutls30-hmac-32bitUpgrade libgnutlsxx28Upgrade libgnutls30-hmac | Mar 25, 2021 | Mar 12, 2021 |
| Ubuntu | — | Upgrade libgnutls30 | Aug 3, 2021 | Mar 12, 2021 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Mar 12, 2021 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub