A NULL pointer dereference flaw was found in GnuTLS. As Nettle's hash update functions internally call memcpy, providing zero-length input may cause undefined behavior. This flaw leads to a denial of service after authentication in rare circumstances.
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alpine Linux | — | Upgrade gnutls | Mar 21, 2024 | Aug 24, 2022 |
| Debian | — | Upgrade gnutls28 | Aug 17, 2022 | Aug 17, 2022 |
| Dell Powerstore Dsa2023173 | — | Upgrade Dell PowerStoreOS to the latest version | Oct 23, 2025 | Jun 21, 2023 |
| Huawei Euleros 2_0_sp10 | — | Upgrade gnutls-utilsUpgrade gnutls | Nov 3, 2022 | Aug 24, 2022 |
| Huawei Euleros 2_0_sp5 | — | Upgrade gnutls-daneUpgrade gnutls-develUpgrade gnutls-utilsUpgrade gnutls-c++Upgrade gnutls | Mar 9, 2023 | Aug 24, 2022 |
| Huawei Euleros 2_0_sp8 | — | Upgrade gnutls-develUpgrade gnutls-daneUpgrade gnutls-c++Upgrade gnutlsUpgrade gnutls-utils | Feb 9, 2023 | Aug 24, 2022 |
| Huawei Euleros 2_0_sp9 | — | Upgrade gnutlsUpgrade gnutls-develUpgrade gnutls-help | Nov 15, 2022 | Aug 24, 2022 |
| Redhat_linux | — | No solution exists | Jul 9, 2025 | Aug 24, 2022 |
| Suse | — | Upgrade libgnutls30-hmacUpgrade libgnutls28-32bitUpgrade libgnutlsxx-develUpgrade libgnutls28Upgrade libgnutls-develUpgrade libgnutls30-32bitUpgrade gnutls-guileUpgrade gnutlsUpgrade libgnutls-openssl27Upgrade libgnutls30-hmac-32bitUpgrade libgnutls-openssl-develUpgrade libgnutls-devel-32bitUpgrade libgnutls30Upgrade libgnutlsxx28 | Mar 3, 2022 | Mar 3, 2022 |
| Ubuntu | — | Upgrade libgnutls30 (Ubuntu Pro)Upgrade libgnutls30 | Aug 5, 2022 | Mar 3, 2022 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Aug 24, 2022 |
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub