TI-2019-02841 CVE-2019-3829 · GHSA-mm54-95hq-f739
Use after free in gnutls
Priority HIGH 67
A vulnerability was found in gnutls versions from 3.5.8 before 3.6.7.
gnutls security, bug fix, and enhancement update
Released 2019-11-05 · Red Hat rating Moderate · View on Red Hat →
A vulnerability was found in gnutls versions from 3.5.8 before 3.6.7.
It was discovered in gnutls before version 3.6.7 upstream that there is an uninitialized pointer access in gnutls versions 3.6.3 or later which can be triggered by certain post-handshake messages.