A flaw was found in gnutls. A use after free issue in client sending key_share extension may lead to memory corruption and other consequences.

🗓️ 20 Mar 2021 07:00:00Reported by MicrosoftType

A gnu tls library flaw causes use after free in the client sending the key share extension, risking memory corruption.

Reporter	Title	Published	Views	Family All 99
IBM Security Bulletins	Security Bulletin: Multiple security vulnerabilities found in open source code that is shipped with IBM Security Verify Governance, Identity Manager virtual appliance component	20 Jul 202215:54	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple security vulnerabilities fixed in Cloud Pak for Automation components	19 Jan 202216:26	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Sterling Connect:Direct for UNIX Certified Container is affected by multiple vulnerabilities in Red Hat Universal Base Image version 8.4-206.1626828523 and Binutils version 2.30-93	14 Mar 202220:12	–	ibm
IBM Security Bulletins	Security Bulletin: IBM QRadar SIEM is vulnerable to using components with Known Vulnerabilities	25 Apr 202214:44	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Cloud Pak for Security includes components with multiple known vulnerabilities	12 Jan 202317:22	–	ibm
ALT Linux	Security fix for the ALT Linux 9 package gnutls30 version 3.6.15-alt2	24 Mar 202100:00	–	altlinux
ALT Linux	Security fix for the ALT Linux 10 package gnutls30 version 3.6.15-alt2	22 Mar 202100:00	–	altlinux
Tenable Nessus	Alibaba Cloud Linux 3 : 0181: gnutls (ALINUX3-SA-2022:0181)	14 May 202500:00	–	nessus
Tenable Nessus	AlmaLinux 8 : gnutls and nettle (ALSA-2021:4451)	9 Feb 202200:00	–	nessus
Tenable Nessus	CentOS 8 : gnutls and nettle (CESA-2021:4451)	11 Nov 202100:00	–	nessus