A flaw was found in gnutls. A use after free issue in client sending key_share extension may lead to memory corruption and other consequences.
CVSS Details
- CVSS 3.1 Base Score: 9.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade gnutls-c++Upgrade nettle-develUpgrade gnutls-utilsUpgrade gnutls-daneUpgrade nettleUpgrade gnutlsUpgrade gnutls-devel | May 4, 2022 | Mar 12, 2021 |
| Alpine Linux | — | Upgrade gnutls | Jun 17, 2022 | Mar 12, 2021 |
| Arch Linux | — | Upgrade to the latest version of Arch Linux | Jul 11, 2025 | Mar 12, 2021 |
| Centos_linux | — | Upgrade gnutls-develUpgrade gnutls-c++-debuginfoUpgrade gnutlsUpgrade nettleUpgrade gnutls-utils-debuginfoUpgrade gnutls-debuginfoUpgrade gnutls-daneUpgrade gnutls-debugsourceUpgrade nettle-develUpgrade gnutls-utilsUpgrade nettle-debuginfoUpgrade gnutls-c++Upgrade nettle-debugsourceUpgrade gnutls-dane-debuginfo | Nov 10, 2021 | Mar 12, 2021 |
| Debian | — | Upgrade gnutls28 | Jul 30, 2024 | Mar 12, 2021 |
| Huawei Euleros 2_0_sp8 | — | Upgrade gnutlsUpgrade gnutls-utilsUpgrade gnutls-daneUpgrade gnutls-develUpgrade gnutls-c++ | Nov 2, 2021 | Mar 12, 2021 |
| Huawei Euleros 2_0_sp9 | — | Upgrade gnutlsUpgrade gnutls-utils | Aug 10, 2021 | Mar 12, 2021 |
| Oracle Solaris | — | Upgrade library/gnutls-3 to version 3.7.1-11.4.36.0.1.101.0 on Solaris 11.4 | Aug 27, 2021 | Mar 12, 2021 |
| Oracle_linux | — | Upgrade nettleUpgrade gnutls-utilsUpgrade gnutlsUpgrade gnutls-daneUpgrade nettle-develUpgrade gnutls-develUpgrade gnutls-c++ | Nov 17, 2021 | Mar 12, 2021 |
| Redhat_linux | — | Upgrade nettleUpgrade nettle-debuginfoUpgrade gnutls-debuginfoUpgrade gnutls-dane-debuginfoUpgrade gnutls-c++Upgrade nettle-debugsourceUpgrade nettle-develUpgrade gnutls-utilsUpgrade gnutlsUpgrade gnutls-daneUpgrade gnutls-c++-debuginfoUpgrade gnutls-utils-debuginfoUpgrade gnutls-debugsourceUpgrade gnutls-devel | Nov 10, 2021 | Mar 12, 2021 |
| Rocky_linux | — | Upgrade gnutls-daneUpgrade nettle-develUpgrade gnutls-utilsUpgrade gnutls-debuginfoUpgrade nettle-debuginfoUpgrade gnutls-develUpgrade gnutls-utils-debuginfoUpgrade nettleUpgrade gnutls-c++Upgrade nettle-debugsourceUpgrade gnutls-debugsourceUpgrade gnutlsUpgrade gnutls-c++-debuginfoUpgrade gnutls-dane-debuginfo | Mar 12, 2024 | Mar 12, 2021 |
| Suse | — | Upgrade libgnutls30-32bitUpgrade libgnutls-dane0Upgrade libgnutls30Upgrade gnutlsUpgrade libgnutls-dane-develUpgrade libgnutlsxx28Upgrade gnutls-guileUpgrade libgnutls30-hmac-32bitUpgrade libgnutlsxx-develUpgrade libgnutls-develUpgrade libgnutls30-hmacUpgrade libgnutls-devel-32bit | Mar 25, 2021 | Mar 12, 2021 |
| Ubuntu | — | Upgrade libgnutls30 | Aug 3, 2021 | Mar 12, 2021 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Mar 12, 2021 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub