A flaw has been discovered in GnuTLS where an application crash can be induced when attempting to verify a specially crafted .pem bundle using the "certtool --verify-chain" command.
CVSS Details
- CVSS 3.1 Base Score: 5
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade gnutls-utilsUpgrade gnutls-c++Upgrade gnutls-develUpgrade gnutls-daneUpgrade gnutls | Apr 19, 2024 | Mar 21, 2024 |
| Alpine Linux | — | Upgrade gnutls | Mar 26, 2024 | Mar 21, 2024 |
| Amazon_linux_2023 | — | Upgrade gnutls-daneUpgrade gnutls-utils-debuginfoUpgrade gnutls-c++Upgrade gnutlsUpgrade gnutls-c++-debuginfoUpgrade gnutls-develUpgrade gnutls-dane-debuginfoUpgrade gnutls-utilsUpgrade gnutls-debugsourceUpgrade gnutls-debuginfo | Feb 17, 2025 | Mar 21, 2024 |
| Debian | — | Upgrade gnutls28 | Jul 30, 2024 | Mar 21, 2024 |
| Gentoo Linux | — | Upgrade net-libs/gnutls. | Jul 2, 2025 | Mar 21, 2024 |
| Huawei Euleros 2_0_sp11 | — | Upgrade gnutlsUpgrade gnutls-utils | Jun 26, 2024 | Mar 21, 2024 |
| Huawei Euleros 2_0_sp12 | — | Upgrade gnutlsUpgrade gnutls-utils | Oct 8, 2024 | Mar 21, 2024 |
| Oracle_linux | — | Upgrade gnutls-utilsUpgrade gnutlsUpgrade gnutls-daneUpgrade gnutls-develUpgrade gnutls-c++ | Apr 19, 2024 | Mar 21, 2024 |
| Redhat_linux | — | Upgrade gnutls-daneUpgrade gnutls-utilsUpgrade gnutls-c++-debuginfoUpgrade gnutls-utils-debuginfoNo solution existsUpgrade gnutlsUpgrade gnutls-develUpgrade gnutls-debugsourceUpgrade gnutls-dane-debuginfoUpgrade gnutls-c++Upgrade gnutls-debuginfo | Apr 19, 2024 | Mar 21, 2024 |
| Rocky_linux | — | Upgrade gnutls-daneUpgrade gnutls-debuginfoUpgrade gnutls-utils-debuginfoUpgrade gnutls-debugsourceUpgrade gnutls-dane-debuginfoUpgrade gnutls-c++-debuginfoUpgrade gnutlsUpgrade gnutls-utilsUpgrade gnutls-develUpgrade gnutls-c++ | May 13, 2024 | Mar 21, 2024 |
| Suse | — | Upgrade libgnutlsxx30Upgrade libgnutls30Upgrade libgnutls30-32bitUpgrade libgnutls30-hmac-32bitUpgrade libgnutlsxx-develUpgrade libgnutlsxx28Upgrade libgnutls30-hmacUpgrade gnutlsUpgrade libgnutls-devel-32bitUpgrade gnutls-guileUpgrade libgnutls-devel | Apr 15, 2024 | Mar 21, 2024 |
| Ubuntu | — | Upgrade libgnutls30 | Apr 16, 2024 | Mar 21, 2024 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Mar 21, 2024 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub