vulnerability
Red Hat OpenShift: CVE-2019-3836: gnutls: invalid pointer access upon receiving async handshake messages
| Severity | CVSS | Published | Added | Modified |
|---|---|---|---|---|
| 5 | (AV:N/AC:L/Au:N/C:N/I:N/A:P) | Apr 1, 2019 | Dec 29, 2020 | May 10, 2023 |
Severity
5
CVSS
(AV:N/AC:L/Au:N/C:N/I:N/A:P)
Published
Apr 1, 2019
Added
Dec 29, 2020
Modified
May 10, 2023
Description
It was discovered in gnutls before version 3.6.7 upstream that there is an uninitialized pointer access in gnutls versions 3.6.3 or later which can be triggered by certain post-handshake messages.
Solution
linuxrpm-upgrade-redhat-coreos
NEW
Explore Exposure Command
Confidently identify and prioritize exposures from endpoint to cloud with full attack surface visibility and threat-aware risk context.