{"id":"CVE-2019-3836","aliases":["ALPINE-CVE-2019-3836","BELL-CVE-2019-3836","DEBIAN-CVE-2019-3836","EUVD-2019-13456","GHSA-fqw6-7w7w-627p","RHSA-2019:3600","SUSE-SU-2019:1121-1","openSUSE-SU-2019:1353-1","openSUSE-SU-2024:10801-1"],"status":"published","title":"It was discovered in gnutls before version 3.6.7 upstream that there is an uninitialized pointer...","description":"It was discovered in gnutls before version 3.6.7 upstream that there is an uninitialized pointer access in gnutls versions 3.6.3 or later which can be triggered by certain post-handshake messages.","severity":{"version":"3.0","score":5.9,"vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"medium","assessor":"cna","from":"cve"},"epss":{"day":"2026-11-09","score":0.03429,"percentile":0.89024,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":true},"cwes":["CWE-456","CWE-824"],"published":"2019-04-01T14:16:51Z","modified":"2026-10-24T10:49:59Z","fixes":[{"ecosystem":"Alpine:v3.10","package":"gnutls","fixed_in":["3.6.7-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.11","package":"gnutls","fixed_in":["3.6.7-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.12","package":"gnutls","fixed_in":["3.6.7-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.13","package":"gnutls","fixed_in":["3.6.7-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.14","package":"gnutls","fixed_in":["3.6.7-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.15","package":"gnutls","fixed_in":["3.6.7-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.16","package":"gnutls","fixed_in":["3.6.7-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.17","package":"gnutls","fixed_in":["3.6.7-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.18","package":"gnutls","fixed_in":["3.6.7-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.19","package":"gnutls","fixed_in":["3.6.7-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.20","package":"gnutls","fixed_in":["3.6.7-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.21","package":"gnutls","fixed_in":["3.6.7-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.22","package":"gnutls","fixed_in":["3.6.7-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.23","package":"gnutls","fixed_in":["3.6.7-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.24","package":"gnutls","fixed_in":["3.6.7-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.8","package":"gnutls","fixed_in":["3.6.7-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.9","package":"gnutls","fixed_in":["3.6.7-r0"],"sources":["osv"]},{"ecosystem":"Debian:12","package":"gnutls28","fixed_in":["3.6.7-2"],"sources":["osv"]},{"ecosystem":"Debian:13","package":"gnutls28","fixed_in":["3.6.7-2"],"sources":["osv"]},{"ecosystem":"Debian:14","package":"gnutls28","fixed_in":["3.6.7-2"],"sources":["osv"]}],"affected":[{"source":"osv","ecosystem":"Alpine:v3.10","package":"gnutls","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"3.6.3"},{"fixed":"3.6.7-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.11","package":"gnutls","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"3.6.3"},{"fixed":"3.6.7-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.12","package":"gnutls","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"3.6.3"},{"fixed":"3.6.7-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.13","package":"gnutls","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"3.6.3"},{"fixed":"3.6.7-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.14","package":"gnutls","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"3.6.3"},{"fixed":"3.6.7-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.15","package":"gnutls","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"3.6.3"},{"fixed":"3.6.7-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.16","package":"gnutls","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"3.6.3"},{"fixed":"3.6.7-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.17","package":"gnutls","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"3.6.3"},{"fixed":"3.6.7-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.18","package":"gnutls","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"3.6.3"},{"fixed":"3.6.7-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.19","package":"gnutls","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"3.6.3"},{"fixed":"3.6.7-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.20","package":"gnutls","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"3.6.3"},{"fixed":"3.6.7-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.21","package":"gnutls","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"3.6.3"},{"fixed":"3.6.7-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.22","package":"gnutls","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"3.6.3"},{"fixed":"3.6.7-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.23","package":"gnutls","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"3.6.3"},{"fixed":"3.6.7-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.24","package":"gnutls","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"3.6.3"},{"fixed":"3.6.7-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.8","package":"gnutls","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"3.6.3"},{"fixed":"3.6.7-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.9","package":"gnutls","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"3.6.3"},{"fixed":"3.6.7-r0"}]}]},{"source":"osv","ecosystem":"Debian:12","package":"gnutls28","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.6.7-2"}]}]},{"source":"osv","ecosystem":"Debian:13","package":"gnutls28","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.6.7-2"}]}]},{"source":"osv","ecosystem":"Debian:14","package":"gnutls28","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.6.7-2"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"gnutls-c++","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.6.8-8.el8"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"gnutls-c++-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.6.8-8.el8"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"gnutls-dane","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.6.8-8.el8"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"gnutls-dane-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.6.8-8.el8"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"gnutls-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.6.8-8.el8"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"gnutls-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.6.8-8.el8"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"gnutls-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.6.8-8.el8"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"gnutls-utils","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.6.8-8.el8"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"gnutls-utils-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.6.8-8.el8"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::baseos","package":"gnutls","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.6.8-8.el8"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::baseos","package":"gnutls-c++-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.6.8-8.el8"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::baseos","package":"gnutls-dane-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.6.8-8.el8"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::baseos","package":"gnutls-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.6.8-8.el8"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::baseos","package":"gnutls-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.6.8-8.el8"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::baseos","package":"gnutls-utils-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.6.8-8.el8"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Basesystem 15","package":"gnutls","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.6.7-6.8.1"}]}],"bundled":3},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Desktop Applications 15","package":"gnutls","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.6.7-6.8.1"}]}],"bundled":3},{"source":"osv","ecosystem":"openSUSE:Leap 15.0","package":"gnutls","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.6.7-lp150.9.1"}]}],"bundled":3},{"source":"osv","ecosystem":"openSUSE:Tumbleweed","package":"gnutls","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.7.2-1.2"}]}],"bundled":11}],"products":[{"vendor":"fedoraproject","product":"fedora"},{"vendor":"gnu","product":"gnutls"},{"vendor":"gnutls","product":"gnutls"},{"vendor":"opensuse","product":"leap"}],"references":[{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2019-3836","tags":["x_refsource_CONFIRM","x_transferred","Issue Tracking","Third Party Advisory","report"]},{"url":"https://gitlab.com/gnutls/gnutls/issues/704","tags":["x_refsource_CONFIRM","x_transferred","Exploit","Issue Tracking","Third Party Advisory","report"]},{"url":"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/A3ETBUFBB4G7AITAOUYPGXVMBGVXKUAN/","tags":["vendor-advisory","x_refsource_FEDORA","x_transferred","web"]},{"url":"https://security.gentoo.org/glsa/201904-14","tags":["vendor-advisory","x_refsource_GENTOO","x_transferred","Third Party Advisory","advisory"]},{"url":"https://security.netapp.com/advisory/ntap-20190502-0005/","tags":["x_refsource_CONFIRM","x_transferred","Third Party Advisory","advisory"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2019-05/msg00017.html","tags":["vendor-advisory","x_refsource_SUSE","x_transferred","Mailing List","Third Party Advisory","advisory"]},{"url":"https://usn.ubuntu.com/3999-1/","tags":["vendor-advisory","x_refsource_UBUNTU","x_transferred","web"]},{"url":"https://access.redhat.com/errata/RHSA-2019:3600","tags":["vendor-advisory","x_refsource_REDHAT","x_transferred","advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2019-3836","tags":["advisory"]},{"url":"https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/A3ETBUFBB4G7AITAOUYPGXVMBGVXKUAN/"},{"url":"https://github.com/advisories/GHSA-fqw6-7w7w-627p"},{"url":"https://security.alpinelinux.org/vuln/CVE-2019-3836","tags":["advisory"]},{"url":"https://docs.bell-sw.com/security/cves/CVE-2019-3836","tags":["advisory"]},{"url":"https://security-tracker.debian.org/tracker/CVE-2019-3836","tags":["advisory"]},{"url":"https://access.redhat.com/security/updates/classification/#moderate","tags":["article"]},{"url":"https://access.redhat.com/documentation/en-us/red_hat_enterprise_linux/8/html/8.1_release_notes/","tags":["article"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1667427","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1673975","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1677048","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1678411","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1680509","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1680510","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1684461","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1684534","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1686579","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1686582","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1690440","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1691448","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1705478","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1706921","tags":["report"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2019/rhsa-2019_3600.json","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2019-3829","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2019-3829","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2019-3829","tags":["advisory"]},{"url":"https://www.gnutls.org/security-new.html#GNUTLS-SA-2019-03-27","tags":["article"]},{"url":"https://access.redhat.com/security/cve/CVE-2019-3836","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2019-3836","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2019/suse-su-20191121-1/","tags":["advisory"]},{"url":"https://bugzilla.suse.com/1118087","tags":["report"]},{"url":"https://bugzilla.suse.com/1130681","tags":["report"]},{"url":"https://bugzilla.suse.com/1130682","tags":["report"]},{"url":"https://www.suse.com/security/cve/CVE-2018-16868","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-3829","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-3836","tags":["web"]},{"url":"https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/U54THELOIOH5SPZKOQO47AOLQUWXG7TU/#U54THELOIOH5SPZKOQO47AOLQUWXG7TU","tags":["advisory"]},{"url":"","tags":["advisory"]},{"url":"https://www.suse.com/security/cve/CVE-2006-4790","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2008-1948","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2008-1949","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2008-1950","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-8610","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-7869","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-10846","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2020-13777","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2021-20232","tags":["web"]}],"sources":{"cve":[{"id":"CVE-2019-3836","description":"It was discovered in gnutls before version 3.6.7 upstream that there is an uninitialized pointer access in gnutls versions 3.6.3 or later which can be triggered by certain post-handshake messages.","status":"published","published":"2019-04-01T14:16:51Z","modified":"2024-08-04T19:19:18.612Z","cvss":[{"version":"3.0","score":5.9,"vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"medium","assessor":"cna"}],"cwes":["CWE-456"],"updated_at":"2026-11-02T14:20:23.048861Z"}],"euvd":[{"id":"EUVD-2019-13456","description":"It was discovered in gnutls before version 3.6.7 upstream that there is an uninitialized pointer access in gnutls versions 3.6.3 or later which can be triggered by certain post-handshake messages.","status":"published","published":"2019-04-01T14:16:51Z","modified":"2024-08-04T19:19:18Z","cvss":[{"version":"3.0","score":5.9,"vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"medium"}],"updated_at":"2026-11-03T03:06:54.939848Z"}],"ghsa":[{"id":"GHSA-fqw6-7w7w-627p","title":"It was discovered in gnutls before version 3.6.7 upstream that there is an uninitialized pointer...","description":"It was discovered in gnutls before version 3.6.7 upstream that there is an uninitialized pointer access in gnutls versions 3.6.3 or later which can be triggered by certain post-handshake messages.","status":"published","published":"2022-05-14T00:59:50Z","modified":"2023-02-02T05:02:59Z","cvss":[{"version":"3.0","score":7.5,"vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high"}],"cwes":["CWE-824"],"updated_at":"2026-11-02T14:51:32.869646Z"}],"nvd":[{"id":"CVE-2019-3836","description":"It was discovered in gnutls before version 3.6.7 upstream that there is an uninitialized pointer access in gnutls versions 3.6.3 or later which can be triggered by certain post-handshake messages.","status":"published","published":"2019-04-01T15:29:01.06Z","modified":"2026-06-17T02:35:41.5Z","cvss":[{"version":"3.0","score":5.9,"vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"medium","assessor":"secondary"},{"version":"3.0","score":7.5,"vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high","assessor":"primary"},{"version":"2.0","score":5,"vector":"AV:N/AC:L/Au:N/C:N/I:N/A:P","level":"medium","assessor":"primary"}],"cwes":["CWE-456","CWE-824"],"updated_at":"2026-11-02T14:05:09.523883Z"}],"osv":[{"id":"ALPINE-CVE-2019-3836","description":"It was discovered in gnutls before version 3.6.7 upstream that there is an uninitialized pointer access in gnutls versions 3.6.3 or later which can be triggered by certain post-handshake messages.","status":"published","published":"2019-04-01T15:29:01.06Z","modified":"2026-09-21T06:17:52.518731518Z","cvss":[{"version":"3.0","score":7.5,"vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high"}],"updated_at":"2026-11-02T15:27:48.11886Z"},{"id":"BELL-CVE-2019-3836","title":"CVE-2019-3836 does not affect BellSoft software","status":"withdrawn","published":"2023-08-31T12:16:32.723086Z","modified":"2026-01-26T09:46:52.826713Z","cvss":[{"version":"3.0","score":7.5,"vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high"}],"updated_at":"2026-11-02T15:28:15.340685Z"},{"id":"CVE-2019-3836","description":"It was discovered in gnutls before version 3.6.7 upstream that there is an uninitialized pointer access in gnutls versions 3.6.3 or later which can be triggered by certain post-handshake messages.","status":"published","published":"2019-04-01T15:29:01.06Z","modified":"2026-10-24T10:49:59.277398737Z","cvss":[{"version":"3.0","score":7.5,"vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high"}],"updated_at":"2026-11-02T15:44:12.363788Z"},{"id":"DEBIAN-CVE-2019-3836","description":"It was discovered in gnutls before version 3.6.7 upstream that there is an uninitialized pointer access in gnutls versions 3.6.3 or later which can be triggered by certain post-handshake messages.","status":"published","published":"2019-04-01T15:29:01.06Z","modified":"2026-09-21T07:03:18.896369061Z","cvss":[{"version":"3.0","score":7.5,"vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high"}],"updated_at":"2026-11-02T15:45:32.221385Z"},{"id":"RHSA-2019:3600","title":"Red Hat Security Advisory: gnutls security, bug fix, and enhancement update","status":"published","published":"2024-09-16T02:37:24Z","modified":"2026-06-26T12:22:04.08166627Z","cvss":[{"version":"3.0","score":5.9,"vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"medium"}],"updated_at":"2026-11-02T15:53:06.535721Z"},{"id":"openSUSE-SU-2019:1353-1","title":"Security update for gnutls","description":"This update for gnutls fixes to version 3.6.7 the following issues:\n\nSecurity issued fixed:\n\n- CVE-2019-3836: Fixed an invalid pointer access via malformed TLS1.3 async messages (bsc#1130682).\n- CVE-2019-3829: Fixed a double free vulnerability in the certificate verification API (bsc#1130681).\n- CVE-2018-16868: Fixed Bleichenbacher-like side channel leakage in PKCS#1 v1.5 verification and padding oracle verification (bsc#1118087)\n\nNon-security issue fixed:\n\n- Update gnutls to support TLS 1.3 (fate#327114) \n\nThis update was imported from the SUSE:SLE-15:Update update project.","status":"published","published":"2019-05-08T15:04:35Z","modified":"2026-02-04T03:19:42.812589Z","updated_at":"2026-11-02T16:58:30.784344Z"},{"id":"openSUSE-SU-2024:10801-1","title":"gnutls-3.7.2-1.2 on GA media","description":"These are all security issues fixed in the gnutls-3.7.2-1.2 package on the GA media of openSUSE Tumbleweed.","status":"published","published":"2024-06-15T00:00:00Z","modified":"2026-02-04T04:36:06.109989Z","updated_at":"2026-11-02T16:58:34.487567Z"},{"id":"SUSE-SU-2019:1121-1","title":"Security update for gnutls","description":"This update for gnutls fixes to version 3.6.7 the following issues:\n\nSecurity issued fixed:\n\n- CVE-2019-3836: Fixed an invalid pointer access via malformed TLS1.3 async messages (bsc#1130682).\n- CVE-2019-3829: Fixed a double free vulnerability in the certificate verification API (bsc#1130681).\n- CVE-2018-16868: Fixed Bleichenbacher-like side channel leakage in PKCS#1 v1.5 verification and padding oracle verification (bsc#1118087)\n\nNon-security issue fixed:\n\n- Update gnutls to support TLS 1.3 (fate#327114) \n","status":"published","published":"2019-04-30T16:02:47Z","modified":"2026-02-04T04:32:05.837417Z","updated_at":"2026-11-02T15:53:45.926331Z"}]}}