A flaw has been discovered in GnuTLS where an application crash can be induced when attempting to verify a specially crafted .pem bundle using the "certtool --verify-chain" command.
CVSS Details
- CVSS 3.1 Base Score: 5
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade gnutls-c++Upgrade gnutls-develUpgrade gnutls-daneUpgrade gnutlsUpgrade gnutls-utils | Apr 19, 2024 | Mar 21, 2024 |
| Alpine Linux | — | Upgrade gnutls | Mar 26, 2024 | Mar 21, 2024 |
| Amazon_linux_2023 | — | Upgrade gnutls-daneUpgrade gnutls-utilsUpgrade gnutls-debugsourceUpgrade gnutls-develUpgrade gnutls-dane-debuginfoUpgrade gnutls-utils-debuginfoUpgrade gnutlsUpgrade gnutls-debuginfoUpgrade gnutls-c++Upgrade gnutls-c++-debuginfo | Feb 17, 2025 | Mar 21, 2024 |
| Debian | — | Upgrade gnutls28 | Jul 30, 2024 | Mar 21, 2024 |
| Gentoo Linux | — | Upgrade net-libs/gnutls. | Jul 2, 2025 | Mar 21, 2024 |
| Huawei Euleros 2_0_sp11 | — | Upgrade gnutlsUpgrade gnutls-utils | Jun 26, 2024 | Mar 21, 2024 |
| Huawei Euleros 2_0_sp12 | — | Upgrade gnutlsUpgrade gnutls-utils | Oct 8, 2024 | Mar 21, 2024 |
| Oracle_linux | — | Upgrade gnutlsUpgrade gnutls-utilsUpgrade gnutls-c++Upgrade gnutls-daneUpgrade gnutls-devel | Apr 19, 2024 | Mar 21, 2024 |
| Redhat_linux | — | Upgrade gnutls-utils-debuginfoUpgrade gnutls-c++-debuginfoUpgrade gnutls-develUpgrade gnutls-daneNo solution existsUpgrade gnutlsUpgrade gnutls-utilsUpgrade gnutls-debugsourceUpgrade gnutls-debuginfoUpgrade gnutls-c++Upgrade gnutls-dane-debuginfo | Apr 19, 2024 | Mar 21, 2024 |
| Rocky_linux | — | Upgrade gnutls-daneUpgrade gnutls-utils-debuginfoUpgrade gnutls-debuginfoUpgrade gnutls-debugsourceUpgrade gnutls-utilsUpgrade gnutlsUpgrade gnutls-dane-debuginfoUpgrade gnutls-c++-debuginfoUpgrade gnutls-c++Upgrade gnutls-devel | May 13, 2024 | Mar 21, 2024 |
| Suse | — | Upgrade libgnutls30-hmacUpgrade libgnutlsxx28Upgrade libgnutls30-hmac-32bitUpgrade libgnutlsxx30Upgrade libgnutlsxx-develUpgrade libgnutls30Upgrade libgnutls30-32bitUpgrade gnutlsUpgrade libgnutls-devel-32bitUpgrade libgnutls-develUpgrade gnutls-guile | Apr 15, 2024 | Mar 21, 2024 |
| Ubuntu | — | Upgrade libgnutls30 | Apr 16, 2024 | Mar 21, 2024 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Mar 21, 2024 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub