A flaw was found in gnutls. A use after free issue in client_send_params in lib/ext/pre_shared_key.c may lead to memory corruption and other potential consequences.
CVSS Details
- CVSS 3.1 Base Score: 9.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | alma-upgrade-gnutlsalma-upgrade-gnutls-c++alma-upgrade-gnutls-danealma-upgrade-gnutls-develalma-upgrade-gnutls-utilsalma-upgrade-nettlealma-upgrade-nettle-devel | May 4, 2022 | Mar 12, 2021 | |
| Alpine Linux | alpine-linux-upgrade-gnutls | Jun 17, 2022 | Mar 12, 2021 | |
| Arch Linux | arch-linux-upgrade-latest | Jul 11, 2025 | Mar 12, 2021 | |
| Centos_linux | — | centos-upgrade-gnutlscentos-upgrade-gnutls-ccentos-upgrade-gnutls-c-debuginfocentos-upgrade-gnutls-danecentos-upgrade-gnutls-dane-debuginfocentos-upgrade-gnutls-debuginfocentos-upgrade-gnutls-debugsourcecentos-upgrade-gnutls-develcentos-upgrade-gnutls-utilscentos-upgrade-gnutls-utils-debuginfocentos-upgrade-nettlecentos-upgrade-nettle-debuginfocentos-upgrade-nettle-debugsourcecentos-upgrade-nettle-devel | Nov 10, 2021 | Mar 12, 2021 |
| Debian | debian-upgrade-gnutls28 | Jul 30, 2024 | Mar 12, 2021 | |
| Huawei Euleros 2_0_sp8 | huawei-euleros-2_0_sp8-upgrade-gnutlshuawei-euleros-2_0_sp8-upgrade-gnutls-c++huawei-euleros-2_0_sp8-upgrade-gnutls-danehuawei-euleros-2_0_sp8-upgrade-gnutls-develhuawei-euleros-2_0_sp8-upgrade-gnutls-utils | Nov 2, 2021 | Mar 12, 2021 | |
| Huawei Euleros 2_0_sp9 | huawei-euleros-2_0_sp9-upgrade-gnutlshuawei-euleros-2_0_sp9-upgrade-gnutls-utils | Aug 10, 2021 | Mar 12, 2021 | |
| Oracle Solaris | oracle-solaris-11-4-upgrade-library-gnutls-3-3-7-1-11-4-36-0-1-101-0 | Aug 27, 2021 | Mar 12, 2021 | |
| Oracle_linux | — | oracle-linux-upgrade-gnutlsoracle-linux-upgrade-gnutls-coracle-linux-upgrade-gnutls-daneoracle-linux-upgrade-gnutls-develoracle-linux-upgrade-gnutls-utilsoracle-linux-upgrade-nettleoracle-linux-upgrade-nettle-devel | Nov 17, 2021 | Mar 12, 2021 |
| Redhat_linux | redhat-upgrade-gnutlsredhat-upgrade-gnutls-credhat-upgrade-gnutls-c-debuginforedhat-upgrade-gnutls-daneredhat-upgrade-gnutls-dane-debuginforedhat-upgrade-gnutls-debuginforedhat-upgrade-gnutls-debugsourceredhat-upgrade-gnutls-develredhat-upgrade-gnutls-utilsredhat-upgrade-gnutls-utils-debuginforedhat-upgrade-nettleredhat-upgrade-nettle-debuginforedhat-upgrade-nettle-debugsourceredhat-upgrade-nettle-devel | Nov 10, 2021 | Mar 12, 2021 | |
| Rocky_linux | rocky-upgrade-gnutlsrocky-upgrade-gnutls-c++rocky-upgrade-gnutls-c++-debuginforocky-upgrade-gnutls-danerocky-upgrade-gnutls-dane-debuginforocky-upgrade-gnutls-debuginforocky-upgrade-gnutls-debugsourcerocky-upgrade-gnutls-develrocky-upgrade-gnutls-utilsrocky-upgrade-gnutls-utils-debuginforocky-upgrade-nettlerocky-upgrade-nettle-debuginforocky-upgrade-nettle-debugsourcerocky-upgrade-nettle-devel | Mar 12, 2024 | Mar 12, 2021 | |
| Suse | — | suse-upgrade-gnutlssuse-upgrade-gnutls-guilesuse-upgrade-libgnutls-dane-develsuse-upgrade-libgnutls-dane0suse-upgrade-libgnutls-develsuse-upgrade-libgnutls-devel-32bitsuse-upgrade-libgnutls30suse-upgrade-libgnutls30-32bitsuse-upgrade-libgnutls30-hmacsuse-upgrade-libgnutls30-hmac-32bitsuse-upgrade-libgnutlsxx-develsuse-upgrade-libgnutlsxx28 | Mar 25, 2021 | Mar 12, 2021 |
| Ubuntu | ubuntu-upgrade-libgnutls30 | Aug 3, 2021 | Mar 12, 2021 | |
| Vmware Photon_os | vmware-photon_os_update_tdnf | Jan 20, 2025 | Mar 12, 2021 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub