gnutls vulnerabilities (Alpine)
37 vulnerabilities.
-
gnutlsAlpine Gnutls: gnutls: security bypass due to incorrect name constraint handling 7.4 High -
gnutlsAlpine Gnutls: gnutls: authentication bypass via nul character in username 7.1 High -
gnutlsAlpine Gnutls: gnutls: denial of service via heap buffer overflow in dtls handshake fragment reassembly 7.5 High -
gnutlsAlpine Gnutls: gnutls: denial of service via dtls zero-length fragment 7.5 High -
gnutlsAlpine Gnutls: gnutls: security bypass allows acceptance of revoked server certificates via crafted ocsp response 3.7 Low -
gnutlsAlpine Gnutls: gnutls: policy bypass due to case-sensitive nameconstraints comparison 6.5 Medium -
gnutlsAlpine Gnutls: gnutls: information disclosure via timing side-channel in pkcs#7 padding removal 3.7 Low -
gnutlsAlpine Gnutls: gnutls: information disclosure via heap overread in rsa key exchange 8.2 High -
gnutlsAlpine Gnutls: gnutls: memory corruption due to off-by-one error in pkcs#12 bag handling 5.3 Medium -
gnutlsAlpine Gnutls: gnutls: use-after-free in gnutls_pkcs11_token_set_pin 6.6 Medium -
gnutlsAlpine Gnutls: gnutls: certificate validation bypass due to oversized subject alternative name 8.2 High -
gnutlsAlpine Gnutls: gnutls: certificate validation bypass due to improper handling of uri and srv sans 7.1 High -
gnutlsAlpine Gnutls: gnutls: denial of service via dtls packet reordering vulnerability 7.5 High -
gnutlsAlpine Gnutls: gnutls: remote denial of service via crafted clienthello with invalid psk binder 7.5 High -
gnutlsAlpine Gnutls: gnutls: denial of service via excessive resource consumption during certificate verification 5.3 Medium -
gnutlsAlpine Gnutls: stack-based buffer overflow in gnutls_pkcs11_token_init() function 4.0 Medium -
gnutlsAlpine Gnutls: null pointer dereference in _gnutls_figure_common_ciphersuite() 6.5 Medium -
gnutlsAlpine Gnutls: vulnerability in gnutls certtool template parsing 6.5 Medium -
gnutlsAlpine Gnutls: vulnerability in gnutls sct extension parsing 5.3 Medium -
gnutlsAlpine Gnutls: vulnerability in gnutls othername san export 6.5 Medium -
gnutlsAlpine Gnutls: gnutls impacted by inefficient der decoding in libtasn1 leading to remote dos 5.3 Medium -
gnutlsAlpine Gnutls: vulnerable to minerva side-channel information leak 5.3 Medium -
gnutlsAlpine Gnutls: potential crash during chain building/verification 5.0 Medium -
gnutlsAlpine Gnutls: rejects certificate chain with distributed trust 7.5 High -
gnutlsAlpine Gnutls: incomplete fix for cve-2023-5981 7.5 High -
gnutlsAlpine Gnutls: timing side-channel in the rsa-psk authentication 5.9 Medium -
gnutlsAlpine A timing side-channel in the handling of RSA ClientKeyExchange messages was discovered in GnuTLS.... 7.4 High -
gnutlsAlpine A vulnerability found in gnutls. This security flaw happens because of a double free error occurs... 7.5 High -
gnutlsAlpine A flaw was found in gnutls. A use after free issue in client_send_params in lib/ext... 9.8 Critical -
gnutlsAlpine A flaw was found in gnutls. A use after free issue in client sending key_share extension may lead... 9.8 Critical -
gnutlsAlpine An issue was discovered in GnuTLS before 3.6.15. A server can trigger a NULL pointer dereference... 7.5 High -
gnutlsAlpine GnuTLS 3.6.x before 3.6.14 uses incorrect cryptography for encrypting a session ticket (a loss of... 7.4 High -
gnutlsAlpine GnuTLS 3.6.x before 3.6.13 uses incorrect cryptography for DTLS. The earliest affected version is... 7.4 High -
gnutlsAlpine It was discovered in gnutls before version 3.6.7 upstream that there is an uninitialized pointer... 5.9 Medium -
gnutlsAlpine A vulnerability was found in gnutls versions from 3.5.8 before 3.6.7. A memory corruption (double... 5.3 Medium -
gnutlsAlpine GnuTLS version 3.5.12 and earlier is vulnerable to a NULL pointer dereference while decoding a... 7.5 High -
gnutlsAlpine The gnutls_ocsp_resp_check_crt function in lib/x509/ocsp.c in GnuTLS before 3.4.15 and 3.5.x... 7.5 High