A flaw has been discovered in GnuTLS where an application crash can be induced when attempting to verify a specially crafted .pem bundle using the "certtool --verify-chain" command.
CVSS Details
- CVSS 3.1 Base Score: 5
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade gnutls-develUpgrade gnutls-daneUpgrade gnutlsUpgrade gnutls-c++Upgrade gnutls-utils | Apr 19, 2024 | Mar 21, 2024 |
| Alpine Linux | — | Upgrade gnutls | Mar 26, 2024 | Mar 21, 2024 |
| Amazon_linux_2023 | — | Upgrade gnutls-daneUpgrade gnutls-c++-debuginfoUpgrade gnutls-dane-debuginfoUpgrade gnutlsUpgrade gnutls-debuginfoUpgrade gnutls-c++Upgrade gnutls-utilsUpgrade gnutls-utils-debuginfoUpgrade gnutls-develUpgrade gnutls-debugsource | Feb 17, 2025 | Mar 21, 2024 |
| Debian | — | Upgrade gnutls28 | Jul 30, 2024 | Mar 21, 2024 |
| Gentoo Linux | — | Upgrade net-libs/gnutls. | Jul 2, 2025 | Mar 21, 2024 |
| Huawei Euleros 2_0_sp11 | — | Upgrade gnutls-utilsUpgrade gnutls | Jun 26, 2024 | Mar 21, 2024 |
| Huawei Euleros 2_0_sp12 | — | Upgrade gnutls-utilsUpgrade gnutls | Oct 8, 2024 | Mar 21, 2024 |
| Oracle_linux | — | Upgrade gnutls-c++Upgrade gnutls-daneUpgrade gnutls-develUpgrade gnutlsUpgrade gnutls-utils | Apr 19, 2024 | Mar 21, 2024 |
| Redhat_linux | — | Upgrade gnutls-debugsourceUpgrade gnutlsUpgrade gnutls-utilsUpgrade gnutls-utils-debuginfoUpgrade gnutls-c++-debuginfoUpgrade gnutls-daneNo solution existsUpgrade gnutls-develUpgrade gnutls-c++Upgrade gnutls-debuginfoUpgrade gnutls-dane-debuginfo | Apr 19, 2024 | Mar 21, 2024 |
| Rocky_linux | — | Upgrade gnutls-daneUpgrade gnutls-utilsUpgrade gnutls-dane-debuginfoUpgrade gnutls-c++-debuginfoUpgrade gnutls-debuginfoUpgrade gnutls-debugsourceUpgrade gnutls-c++Upgrade gnutls-develUpgrade gnutls-utils-debuginfoUpgrade gnutls | May 13, 2024 | Mar 21, 2024 |
| Suse | — | Upgrade libgnutls30-hmacUpgrade libgnutls30Upgrade gnutlsUpgrade libgnutlsxx-develUpgrade libgnutls30-32bitUpgrade libgnutls30-hmac-32bitUpgrade libgnutlsxx30Upgrade libgnutlsxx28Upgrade gnutls-guileUpgrade libgnutls-develUpgrade libgnutls-devel-32bit | Apr 15, 2024 | Mar 21, 2024 |
| Ubuntu | — | Upgrade libgnutls30 | Apr 16, 2024 | Mar 21, 2024 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Mar 21, 2024 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub