CVE-2021-4209

A NULL pointer dereference flaw was found in GnuTLS. As Nettle's hash update functions internally call memcpy, providing zero-length input may cause undefined behavior. This flaw leads to a denial of service after authentication in rare circumstances...

CVE-2021-4209

CVE-2021-4209 is a NULL pointer dereference in the GnuTLS library that can cause denial of service after authentication when zero-length input triggers undefined behavior in Nettle hash update paths. The vulnerability is applicable to GnuTLS and has been addressed in vendor advisories and Debian ...

OPENSUSE-SU-2022:2882-1 Security update for gnutls

This update for gnutls fixes the following issues: - CVE-2022-2509: Fixed a double free issue during PKCS7 verification bsc1202020...

SUSE-SU-2022:2882-1 Security update for gnutls

This update for gnutls fixes the following issues: - CVE-2022-2509: Fixed a double free issue during PKCS7 verification bsc1202020...

Security Bulletin: TS3000 code level v7.x affected by Open Source GnuTLS cyrpto issue (CVE-2014-0092)

Summary A security vulnerability has been found that affects certain level of TSSC code. Vulnerability Details lib/x509/verify.c in GnuTLS before 3.1.22 and 3.2.x before 3.2.12 does not properly handle unspecified errors when verifying X.509 certificates from SSL servers, which allows...

Important Photon OS Security Update - PHSA-2022-0232

Updates of 'unbound', 'gnutls' packages of Photon OS have been released...

SUSE: Security Advisory (SUSE-SU-2022:2830-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Important Photon OS Security Update - PHSA-2022-4.0-0232

Updates of 'unbound', 'gnutls' packages of Photon OS have been released...

SUSE SLES15: gnutls / libgnutls-devel / libgnutls30 / libgnutls30-32bit / etc (SUSE-SU-2022:2830-1)

The remote SUSE Linux SLES15 / SLESSAP15 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2022:2830-1 advisory. - CVE-2022-2509: Fixed a double free issue during PKCS7 verification bsc1202020. - CVE-2021-4209: Fixed null pointer dereference in...

SUSE-SU-2022:2830-1 Security update for gnutls

This update for gnutls fixes the following issues: - CVE-2022-2509: Fixed a double free issue during PKCS7 verification bsc1202020. - CVE-2021-4209: Fixed null pointer dereference in MDUPDATE bsc1196167...

Fedora: Security Advisory for gnutls (FEDORA-2022-5470992bfc)

The remote host is missing an update for the Copyright C 2022 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

[SECURITY] Fedora 35 Update: gnutls-3.7.7-1.fc35

GnuTLS is a secure communications library implementing the SSL, TLS and DTLS protocols and technologies around them. It provides a simple C language application programming interface API to access the secure communications protocols as well as APIs to parse and write X.509, PKCS 12, OpenPGP and...

OESA-2022-1822 gnutls security update

GnuTLS is a secure communications library implementing the SSL, TLS and DTLS protocols and technologies around them. It provides a simple C language application programming interface API to access the secure communications protocols as well as APIs to parse and write X.509, PKCS 12, and other...

Debian dla-3070 : gnutls-bin - security update

The remote Debian 10 host has packages installed that are affected by multiple vulnerabilities as referenced in the dla-3070 advisory. - ------------------------------------------------------------------------- Debian LTS Advisory DLA-3070-1 [email protected]...

FreeBSD : gnutls -- double free vulnerability (1cd0c17a-17c0-11ed-91a5-080027f5fec9)

The version of FreeBSD installed on the remote host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the 1cd0c17a-17c0-11ed-91a5-080027f5fec9 advisory. - A vulnerability found in gnutls. This security flaw happens because of a double free error occurs...

A vulnerability found in gnutls. This security flaw happens because of a double free error occurs during verification of pkcs7 signatures in gnutls_pkcs7_verify function.

...

Ubuntu 18.04 LTS / 20.04 LTS / 22.04 LTS : GnuTLS vulnerabilities (USN-5550-1)

The remote Ubuntu 18.04 LTS / 20.04 LTS / 22.04 LTS host has packages installed that are affected by multiple vulnerabilities as referenced in the USN-5550-1 advisory. It was discovered that GnuTLS incorrectly handled certain memory operations. A remote attacker could possibly use this issue to...

USN-5550-1: GnuTLS vulnerabilities

It was discovered that GnuTLS incorrectly handled certain memory operations. A remote attacker could possibly use this issue to cause GnuTLS to crash, resulting in a denial of service. This issue only affected Ubuntu 18.04 LTS, and Ubuntu 20.04 LTS. CVE-2021-4209 It was discovered that GnuTLS...

USN-5550-1 gnutls28 vulnerabilities

It was discovered that GnuTLS incorrectly handled certain memory operations. A remote attacker could possibly use this issue to cause GnuTLS to crash, resulting in a denial of service. This issue only affected Ubuntu 18.04 LTS, and Ubuntu 20.04 LTS. CVE-2021-4209 It was discovered that GnuTLS...

Denial Of Service (DoS)

gnutls is vulnerable to denial of service. The vulnerability exists due to the double error that occurs during verification of pkcs7 signatures in the gnutlspkcs7verify function, allowing an attacker to crash the application...