Gnu Gnutls vulnerabilities

• gnu gnutls, red hat cert manager support for red hat openshift release 1.17, cert manager support for red hat openshift release 1.18 +36 more +38 more Gnutls: gnutls: authentication bypass via nul character in username CVE-2026-42010 Fix available 7.1 HighMay 3, 2026
• gnu gnutls, red hat cert manager support for red hat openshift release 1.17, cert manager support for red hat openshift release 1.18 +32 more +34 more Gnutls: gnutls: denial of service via dtls zero-length fragment CVE-2026-33845 Fix available 7.5 HighApril 30, 2026
• gnu gnutls, red hat cert manager support for red hat openshift release 1.17, cert manager support for red hat openshift release 1.18 +13 more +15 more Gnutls: gnutls: security bypass allows acceptance of revoked server certificates via crafted ocsp response CVE-2026-3832 Fix available 3.7 LowApril 30, 2026
• gnu gnutls, red hat cert manager support for red hat openshift release 1.17, cert manager support for red hat openshift release 1.18 +31 more +33 more Gnutls: gnutls: policy bypass due to case-sensitive nameconstraints comparison CVE-2026-3833 Fix available 6.5 MediumApril 30, 2026
• gnu gnutls, red hat cert manager support for red hat openshift release 1.17, cert manager support for red hat openshift release 1.18 +46 more +48 more Gnutls: gnutls: denial of service via dtls packet reordering vulnerability CVE-2026-42009 Fix available 7.5 HighApril 30, 2026
• gnu gnutls, red hat enterprise linux 10, enterprise linux 6 +5 more +7 more Gnutls: gnutls: remote denial of service via crafted clienthello with invalid psk binder CVE-2026-1584 Fix available 7.5 HighFebruary 10, 2026
• gnu gnutls, red hat ceph storage 7, discovery 2 +12 more +14 more Gnutls: vulnerability in gnutls certtool template parsing CVE-2025-32990 Fix available 6.5 MediumJuly 10, 2025
• gnu gnutls, red hat ceph storage 7, discovery 2 +15 more +17 more Gnutls: vulnerability in gnutls sct extension parsing CVE-2025-32989 Fix available 5.3 MediumJuly 10, 2025
• gnu gnutls, red hat ceph storage 7, discovery 2 +15 more +17 more Gnutls: vulnerability in gnutls othername san export CVE-2025-32988 Fix available 6.5 MediumJuly 10, 2025
• gnu gnutls, debian linux, fedoraproject fedora +10 more +12 more Gnutls: rejects certificate chain with distributed trust CVE-2024-0567 Fix available 7.5 HighJanuary 16, 2024
• gnu gnutls, fedoraproject fedora, red hat enterprise linux 6 +10 more +12 more Gnutls: incomplete fix for cve-2023-5981 CVE-2024-0553 Fix available 7.5 HighJanuary 16, 2024
• gnu gnutls, debian linux, fedoraproject fedora +12 more +14 more Gnutls: timing side-channel in the rsa-psk authentication CVE-2023-5981 Fix available 5.9 MediumNovember 17, 2023
• gnu gnutls, debian linux, fedoraproject fedora +7 more +9 more A timing side-channel in the handling of RSA ClientKeyExchange messages was discovered in GnuTLS.... CVE-2023-0361 Fix available 7.4 HighFebruary 14, 2023
• gnu gnutls, debian linux, fedoraproject fedora +4 more +6 more A vulnerability found in gnutls. This security flaw happens because of a double free error occurs... CVE-2022-2509 Fix available 7.5 HighAugust 1, 2022
• gnu gnutls, netapp active iq unified manager, hci bootstrap os +5 more +7 more A NULL pointer dereference flaw was found in GnuTLS. As Nettle's hash update functions internally... CVE-2021-4209 Fix available 6.5 MediumFebruary 22, 2022
• gnu gnutls, fedoraproject fedora, redhat enterprise linux +3 more +5 more A flaw was found in gnutls. A use after free issue in client_send_params in lib/ext... CVE-2021-20232 Fix available 9.8 CriticalMarch 12, 2021
• gnu gnutls, fedoraproject fedora, netapp active iq unified manager +5 more +7 more A flaw was found in gnutls. A use after free issue in client sending key_share extension may lead... CVE-2021-20231 Fix available 9.8 CriticalMarch 12, 2021
• gnu gnutls, canonical ubuntu linux, fedoraproject fedora +4 more +6 more An issue was discovered in GnuTLS before 3.6.15. A server can trigger a NULL pointer dereference... CVE-2020-24659 Fix available 7.5 HighSeptember 4, 2020
• gnu gnutls, canonical ubuntu linux, debian linux +4 more +6 more GnuTLS 3.6.x before 3.6.14 uses incorrect cryptography for encrypting a session ticket (a loss of... CVE-2020-13777 Public exploitFix available EPSS 22.5% 7.4 HighJune 4, 2020
• gnu gnutls, canonical ubuntu linux, debian linux +5 more +7 more GnuTLS 3.6.x before 3.6.13 uses incorrect cryptography for DTLS. The earliest affected version is... CVE-2020-11501 Fix available 7.4 HighApril 3, 2020
• gnu gnutls, fedoraproject fedora, opensuse leap +2 more It was discovered in gnutls before version 3.6.7 upstream that there is an uninitialized pointer... CVE-2019-3836 Fix available 5.9 MediumApril 1, 2019
• gnu gnutls, fedoraproject fedora +1 more A vulnerability was found in gnutls versions from 3.5.8 before 3.6.7. A memory corruption (double... CVE-2019-3829 Fix available EPSS 59.2% 5.3 MediumMarch 27, 2019
• [unknown] gnutls A Bleichenbacher type side-channel based padding oracle attack was found in the way gnutls... CVE-2018-16868 Fix available 4.7 MediumDecember 3, 2018
• [unknown] gnutls, canonical ubuntu linux, debian linux +4 more +6 more A cache-based side channel in GnuTLS implementation that leads to plain text recovery in cross-VM... CVE-2018-10846 Fix available 5.3 MediumAugust 22, 2018
• [unknown] gnutls, canonical ubuntu linux, debian linux +4 more +6 more It was found that the GnuTLS implementation of HMAC-SHA-384 was vulnerable to a Lucky thirteen... CVE-2018-10845 Fix available 5.9 MediumAugust 22, 2018
• [unknown] gnutls, canonical ubuntu linux, debian linux +4 more +6 more It was found that the GnuTLS implementation of HMAC-SHA-256 was vulnerable to a Lucky thirteen... CVE-2018-10844 Fix available 5.9 MediumAugust 22, 2018
• gnu gnutls The "GNUTLS_KEYLOGFILE" environment variable in gnutls 3.4.12 allows remote attackers to... CVE-2016-4456 Fix available 7.5 HighAugust 8, 2017
• gnu gnutls GnuTLS version 3.5.12 and earlier is vulnerable to a NULL pointer dereference while decoding a... CVE-2017-7507 Fix available 7.5 HighJune 9, 2017
• gnu gnutls GnuTLS before 2017-02-20 has an out-of-bounds write caused by an integer overflow and heap-based... CVE-2017-7869 Fix available 7.5 HighApril 14, 2017
• gnu gnutls, opensuse leap +1 more Multiple heap-based buffer overflows in the read_attribute function in GnuTLS before 3.3.26 and 3... CVE-2017-5337 Fix available 9.8 CriticalJanuary 11, 2017
• gnu gnutls, opensuse leap +1 more Stack-based buffer overflow in the cdk_pk_get_keyid function in lib/opencdk/pubkey.c in GnuTLS... CVE-2017-5336 Fix available 9.8 CriticalJanuary 11, 2017
• gnu gnutls, opensuse leap +1 more The stream reading functions in lib/opencdk/read-packet.c in GnuTLS before 3.3.26 and 3.5.x... CVE-2017-5335 Fix available 7.5 HighJanuary 11, 2017
• gnu gnutls, opensuse leap +1 more Double free vulnerability in the gnutls_x509_ext_import_proxy function in GnuTLS before 3.3.26... CVE-2017-5334 Fix available EPSS 32.8% 9.8 CriticalJanuary 11, 2017
• gnu gnutls The gnutls_ocsp_resp_check_crt function in lib/x509/ocsp.c in GnuTLS before 3.4.15 and 3.5.x... CVE-2016-7444 Fix available 7.5 HighSeptember 27, 2016
• gnu gnutls, debian linux +1 more GnuTLS incorrectly validates the first byte of padding in CBC modes CVE-2015-8313 Fix available 5.9 MediumNovember 30, 2015
• gnu gnutls, canonical ubuntu linux +1 more Double free vulnerability in lib/x509/x509_ext.c in GnuTLS before 3.3.14 allows remote attackers... CVE-2015-3308 Fix available 7.5 HighSeptember 2, 2015
• gnu gnutls, debian linux +1 more Double free vulnerability in GnuTLS before 3.3.17 and 3.4.x before 3.4.4 allows remote attackers... CVE-2015-6251 Fix available EPSS 19.2% 5.0 MediumAugust 12, 2015
• gnu gnutls, canonical ubuntu linux, opensuse +4 more +6 more The _gnutls_ecc_ansi_x963_export function in gnutls_ecc.c in GnuTLS 3.x before 3.1.28, 3.2.x... CVE-2014-8564 Fix available 5.0 MediumNovember 13, 2014
• gnu gnutls, debian linux, redhat enterprise linux +2 more GnuTLS before 3.3.13 does not validate that the signature algorithms match when importing a... CVE-2015-0294 Fix available 7.5 HighJune 3, 2014
• gnu gnutls GnuTLS before 3.1.0 does not verify that the RSA PKCS #1 signature algorithm matches the... CVE-2015-0282 Fix available 5.0 MediumJune 3, 2014
• gnu gnutls GnuTLS before 2.9.10 does not verify the activation and expiration dates of CA certificates,... CVE-2014-8155 4.3 MediumJune 3, 2014
• gnu gnutls The gnutls_x509_dn_oid_name function in lib/x509/common.c in GnuTLS 3.0 before 3.1.20 and 3.2.x... CVE-2014-3465 Fix available 5.0 MediumJune 2, 2014
• gnu libtasn1, debian linux, gnu gnutls +11 more +13 more The (1) asn1_read_value_type and (2) asn1_read_value functions in GNU Libtasn1 before 3.6 allows... CVE-2014-3469 Fix available 5.0 MediumJune 2, 2014
• gnu libtasn1, debian linux, f5 arx firmware +12 more +14 more The asn1_get_bit_der function in GNU Libtasn1 before 3.6 does not properly report an error when a... CVE-2014-3468 Fix available 7.5 HighJune 2, 2014
• gnu gnutls, libtasn1, debian linux +12 more +14 more Multiple unspecified vulnerabilities in the DER decoder in GNU Libtasn1 before 3.6, as used in... CVE-2014-3467 Fix available 5.0 MediumJune 2, 2014
• gnu gnutls Buffer overflow in the read_server_hello function in lib/gnutls_handshake.c in GnuTLS before 3.1... CVE-2014-3466 Public exploitFix available EPSS 11.2% 6.8 MediumJune 1, 2014
• gnu gnutls GnuTLS before 2.7.6, when the GNUTLS_VERIFY_ALLOW_X509_V1_CA_CRT flag is not enabled, treats... CVE-2009-5138 5.8 MediumMarch 6, 2014
• gnu gnutls lib/x509/verify.c in GnuTLS before 3.1.22 and 3.2.x before 3.2.12 does not properly handle... CVE-2014-0092 Fix available EPSS 29.9% 5.8 MediumMarch 3, 2014
• gnu gnutls lib/x509/verify.c in GnuTLS before 3.1.21 and 3.2.x before 3.2.11 treats version 1 X.509... CVE-2014-1959 Fix available 5.8 MediumFebruary 16, 2014
• gnu gnutls, opensuse +1 more Off-by-one error in the dane_raw_tlsa in the DANE library (libdane) in GnuTLS 3.1.x before 3.1.16... CVE-2013-4487 5.0 MediumNovember 19, 2013
• Show olderLoading…