CVE-2021-4209

2022-08-2415:07:31

CWE-476

redhat

www.cve.org

gnutls

null pointer

denial of service

AI Score

6.7

Confidence

High

EPSS

0.002

Percentile

58.9%

JSON

A NULL pointer dereference flaw was found in GnuTLS. As Nettle’s hash update functions internally call memcpy, providing zero-length input may cause undefined behavior. This flaw leads to a denial of service after authentication in rare circumstances.

CNA Affected

[
  {
    "product": "GnuTLS",
    "vendor": "n/a",
    "versions": [
      {
        "status": "affected",
        "version": "Fixed in gnutls v3.7.3"
      }
    ]
  }
]