AZL-6447 CVE-2021-20232 affecting package gnutls for versions less than 3.6.14-5

🗓️ 12 Mar 2021 19:15:13Reported by GoogleType

osv

osv🔗 osv.dev👁 1 Views

Gnutls flaw below 3.6.14-5 causes use-after-free in client_send_params, risking memory corruption.

Reporter	Title	Published	Views	Family All 103
IBM Security Bulletins	Security Bulletin: Multiple security vulnerabilities found in open source code that is shipped with IBM Security Verify Governance, Identity Manager virtual appliance component	20 Jul 202215:54	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple security vulnerabilities fixed in Cloud Pak for Automation components	19 Jan 202216:26	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Sterling Connect:Direct for UNIX Certified Container is affected by multiple vulnerabilities in Red Hat Universal Base Image version 8.4-206.1626828523 and Binutils version 2.30-93	14 Mar 202220:12	–	ibm
IBM Security Bulletins	Security Bulletin: IBM QRadar SIEM is vulnerable to using components with Known Vulnerabilities	25 Apr 202214:44	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Cloud Pak for Security includes components with multiple known vulnerabilities	12 Jan 202317:22	–	ibm
ALT Linux	Security fix for the ALT Linux 9 package gnutls30 version 3.6.15-alt2	24 Mar 202100:00	–	altlinux
ALT Linux	Security fix for the ALT Linux 10 package gnutls30 version 3.6.15-alt2	22 Mar 202100:00	–	altlinux
Tenable Nessus	Alibaba Cloud Linux 3 : 0181: gnutls (ALINUX3-SA-2022:0181)	14 May 202500:00	–	nessus
Tenable Nessus	AlmaLinux 8 : gnutls and nettle (ALSA-2021:4451)	9 Feb 202200:00	–	nessus
Tenable Nessus	CentOS 8 : gnutls and nettle (CESA-2021:4451)	11 Nov 202100:00	–	nessus

Source	Link
nvd	www.nvd.nist.gov/vuln/detail/CVE-2021-20232

21 Apr 2026 04:32Current

6.7Medium risk

Vulners AI Score6.7

CVSS 3.19.8

EPSS0.00844

gnutls flaw use after free client send params pre shared key memory corruption