[ASA-202103-1] gnutls: arbitrary code execution

Arch Linux Security Advisory ASA-202103-1 ========================================= Severity: Low Date : 2021-03-13 CVE-ID : CVE-2021-20231 CVE-2021-20232 Package : gnutls Type : arbitrary code execution Remote : Yes Link : https://security.archlinux.org/AVG-1674 Summary ======= The package gnutl...

Denial Of Service (DoS)

gnutls is vulnerable to denial of service. The vulnerability exists due to a use after free issue in clientsendparams in lib/ext/presharedkey.c...

DEBIAN-CVE-2021-20232

A flaw was found in gnutls. A use after free issue in clientsendparams in lib/ext/presharedkey.c may lead to memory corruption and other potential consequences...

CVE-2021-20232

A flaw was found in gnutls. A use after free issue in clientsendparams in lib/ext/presharedkey.c may lead to memory corruption and other potential consequences...

DEBIAN-CVE-2021-20231

A flaw was found in gnutls. A use after free issue in client sending keyshare extension may lead to memory corruption and other consequences...

CVE-2021-20232

A flaw was found in gnutls. A use after free issue in clientsendparams in lib/ext/presharedkey.c may lead to memory corruption and other potential consequences...

CVE-2021-20231

A flaw was found in gnutls. A use after free issue in client sending keyshare extension may lead to memory corruption and other consequences...

CVE-2021-20231

A flaw was found in gnutls. A use after free issue in client sending keyshare extension may lead to memory corruption and other consequences...

ALPINE-CVE-2021-20232

A flaw was found in gnutls. A use after free issue in clientsendparams in lib/ext/presharedkey.c may lead to memory corruption and other potential consequences...

AZL-6447 CVE-2021-20232 affecting package gnutls for versions less than 3.6.14-5

A flaw was found in gnutls. A use after free issue in clientsendparams in lib/ext/presharedkey.c may lead to memory corruption and other potential consequences...

AZL-6446 CVE-2021-20231 affecting package gnutls for versions less than 3.6.14-5

A flaw was found in gnutls. A use after free issue in client sending keyshare extension may lead to memory corruption and other consequences...

ALPINE-CVE-2021-20231

A flaw was found in gnutls. A use after free issue in client sending keyshare extension may lead to memory corruption and other consequences...

CVE-2021-20231

A flaw was found in gnutls. A use after free issue in client sending keyshare extension may lead to memory corruption and other consequences...

Memory corruption

A flaw was found in gnutls. A use after free issue in clientsendparams in lib/ext/presharedkey.c may lead to memory corruption and other potential consequences...

Memory corruption

A flaw was found in gnutls. A use after free issue in client sending keyshare extension may lead to memory corruption and other consequences...

UBUNTU-CVE-2021-20231

A flaw was found in gnutls. A use after free issue in client sending keyshare extension may lead to memory corruption and other consequences...

CVE-2021-20232

A flaw was found in gnutls. A use after free issue in clientsendparams in lib/ext/presharedkey.c may lead to memory corruption and other potential consequences...

CVE-2021-20232

A flaw was found in gnutls. A use after free issue in clientsendparams in lib/ext/presharedkey.c may lead to memory corruption and other potential consequences...

CVE-2021-20232

A flaw was found in gnutls. A use after free issue in clientsendparams in lib/ext/presharedkey.c may lead to memory corruption and other potential consequences...

CVE-2021-20232

A vulnerability in GnuTLS (CVE-2021-20232) stems from a use-after-free in client_send_params (lib/ext/pre_shared_key.c), which may cause memory corruption and other consequences. The issue is within the GnuTLS library, affecting TLS 1.3 client handling of pre_shared_key extensions. Documented imp...