AZL-6445 CVE-2020-24659 affecting package gnutls for versions less than 3.6.14-5

🗓️ 04 Sep 2020 15:15:10Reported by GoogleType

osv

osv🔗 osv.dev

CVE-2020-24659: GnuTLS before 3.6.15 may crash TLS 1.3 client after no renegotiation alert and invalid second handshake.

Reporter	Title	Published	Views	Family All 89
IBM Security Bulletins	Security Bulletin: Cloud Pak for Security has several security vulnerabilities addressed in the latest version	30 Jul 202107:38	–	ibm
IBM Security Bulletins	Security Bulletin: IBM QRadar SIEM Application Framework Base Image is vulnerable to using components with Known Vulnerabilities	3 Dec 202118:52	–	ibm
FreeBSD	GnuTLS -- null pointer dereference	4 Sep 202000:00	–	freebsd
Tenable Nessus	Alibaba Cloud Linux 3 : 0008: gnutls (ALINUX3-SA-2021:0008)	14 May 202500:00	–	nessus
Tenable Nessus	AlmaLinux 8 : gnutls (ALSA-2020:5483)	9 Feb 202200:00	–	nessus
Tenable Nessus	CentOS 8 : gnutls (CESA-2020:5483)	1 Feb 202100:00	–	nessus
Tenable Nessus	EulerOS 2.0 SP8 : gnutls (EulerOS-SA-2020-2310)	2 Nov 202000:00	–	nessus
Tenable Nessus	EulerOS Virtualization for ARM 64 3.0.6.0 : gnutls (EulerOS-SA-2021-1582)	4 Mar 202100:00	–	nessus
Tenable Nessus	Fedora 32 : mingw-gnutls (2020-0ab6656303)	14 Sep 202000:00	–	nessus
Tenable Nessus	FreeBSD : GnuTLS -- NULL pointer dereference (2272e6f1-f029-11ea-838a-0011d823eebd)	8 Sep 202000:00	–	nessus

Source	Link
nvd	www.nvd.nist.gov/vuln/detail/CVE-2020-24659

21 Apr 2026 04:32Current

7.2High risk

Vulners AI Score7.2

CVSS 3.17.5

EPSS0.03633

cve 2020 24659 transport layer security null pointer dereference second handshake no renegotiation alert