A flaw has been discovered in GnuTLS where an application crash can be induced when attempting to verify a specially crafted .pem bundle using the "certtool --verify-chain" command.
CVSS Details
- CVSS 3.1 Base Score: 5
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade gnutls-develUpgrade gnutls-daneUpgrade gnutlsUpgrade gnutls-c++Upgrade gnutls-utils | Apr 19, 2024 | Mar 21, 2024 |
| Alpine Linux | — | Upgrade gnutls | Mar 26, 2024 | Mar 21, 2024 |
| Amazon_linux_2023 | — | Upgrade gnutls-daneUpgrade gnutls-c++-debuginfoUpgrade gnutls-debugsourceUpgrade gnutls-debuginfoUpgrade gnutls-c++Upgrade gnutls-utilsUpgrade gnutlsUpgrade gnutls-utils-debuginfoUpgrade gnutls-dane-debuginfoUpgrade gnutls-devel | Feb 17, 2025 | Mar 21, 2024 |
| Debian | — | Upgrade gnutls28 | Jul 30, 2024 | Mar 21, 2024 |
| Gentoo Linux | — | Upgrade net-libs/gnutls. | Jul 2, 2025 | Mar 21, 2024 |
| Huawei Euleros 2_0_sp11 | — | Upgrade gnutls-utilsUpgrade gnutls | Jun 26, 2024 | Mar 21, 2024 |
| Huawei Euleros 2_0_sp12 | — | Upgrade gnutls-utilsUpgrade gnutls | Oct 8, 2024 | Mar 21, 2024 |
| Oracle_linux | — | Upgrade gnutls-utilsUpgrade gnutlsUpgrade gnutls-develUpgrade gnutls-c++Upgrade gnutls-dane | Apr 19, 2024 | Mar 21, 2024 |
| Redhat_linux | — | Upgrade gnutlsUpgrade gnutls-debugsourceUpgrade gnutls-develNo solution existsUpgrade gnutls-utilsUpgrade gnutls-utils-debuginfoUpgrade gnutls-c++-debuginfoUpgrade gnutls-daneUpgrade gnutls-debuginfoUpgrade gnutls-dane-debuginfoUpgrade gnutls-c++ | Apr 19, 2024 | Mar 21, 2024 |
| Rocky_linux | — | Upgrade gnutls-c++Upgrade gnutls-debugsourceUpgrade gnutls-dane-debuginfoUpgrade gnutlsUpgrade gnutls-debuginfoUpgrade gnutls-utilsUpgrade gnutls-utils-debuginfoUpgrade gnutls-c++-debuginfoUpgrade gnutls-develUpgrade gnutls-dane | May 13, 2024 | Mar 21, 2024 |
| Suse | — | Upgrade libgnutlsxx28Upgrade libgnutls30-hmac-32bitUpgrade libgnutls30-hmacUpgrade libgnutlsxx-develUpgrade libgnutlsxx30Upgrade libgnutls30Upgrade gnutlsUpgrade libgnutls30-32bitUpgrade gnutls-guileUpgrade libgnutls-develUpgrade libgnutls-devel-32bit | Apr 15, 2024 | Mar 21, 2024 |
| Ubuntu | — | Upgrade libgnutls30 | Apr 16, 2024 | Mar 21, 2024 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Mar 21, 2024 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub