Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
2 selected

74 records

Vendor: GNU Component: Gnutls Clear all filters
TI-2026-26211 CVE-2026-33845 · GHSA-cmj5-x3xf-69wq

Gnutls: gnutls: denial of service via dtls zero-length fragment

Priority MEDIUM 49

A flaw in GnuTLS DTLS handshake parsing allows malformed fragments with zero length and non-zero offset, leading to an integer underflow during reassembly and resulting in an out-of-bounds read.

CVSS 3.1CRITICAL 9.1 Network No auth No interaction EPSS 0.02073 Published 2026-04-30 Partial fix · 3.8.13, 3.8.10-4.el10_2 +45 CWE-191
TI-2025-24000 CVE-2025-32990 · GHSA-v8v5-8mm8-3j8p

Gnutls: vulnerability in gnutls certtool template parsing

Priority MEDIUM 43

A heap-buffer-overflow (off-by-one) flaw was found in the GnuTLS software in the template parsing logic within the certtool utility.

CVSS 3.1HIGH 8.2 Network No auth No interaction EPSS 0.00896 Published 2025-07-10 Partial fix · 3.8.10, 3.8.9-9.el10_0.14 +8 CWE-122
TI-2025-23999 CVE-2025-32989 · GHSA-f7q5-qg45-7vm8

Gnutls: vulnerability in gnutls sct extension parsing

Priority LOW 27

A heap-buffer-overread vulnerability was found in GnuTLS in how it handles the Certificate Transparency (CT) Signed Certificate Timestamp (SCT) extension during X.509 certificate parsing.

CVSS 3.1MEDIUM 5.3 Network No auth No interaction EPSS 0.01467 Published 2025-07-10 Partial fix · 3.8.10, 3.8.9-9.el10_0.14 +7 CWE-295
TI-2024-00525 CVE-2024-0567 · GHSA-mcx8-9rrj-7qxm

Gnutls: rejects certificate chain with distributed trust

Priority HIGH 72

A vulnerability was found in GnuTLS, where a cockpit (which uses gnuTLS) rejects a certificate chain with distributed trust.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.01392 Published 2024-01-16 Partial fix · 3.8.3, 3.7.6-23.el9_3.3 +36 CWE-347
TI-2024-00511 CVE-2024-0553 · GHSA-x697-v25m-6phv

Gnutls: incomplete fix for cve-2023-5981

Priority MEDIUM 42

A vulnerability was found in GnuTLS.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.01614 Published 2024-01-16 Partial fix · 3.8.3, 3.6.16-8.el8_9.1 +39 CWE-203
TI-2023-05511 CVE-2023-5981 · GHSA-jvj3-gqjm-cg8p

Gnutls: timing side-channel in the rsa-psk authentication

Priority LOW 29

A vulnerability was found that the response times to malformed ciphertexts in RSA-PSK ClientKeyExchange differ from response times of ciphertexts with correct PKCS#1 v1.5 padding.

CVSS 3.1MEDIUM 5.9 Network No auth No interaction EPSS 0.01267 Published 2023-11-28 Partial fix · 3.6.16-8.el8_9, 3.6.16-5.el8_6.2 +38 CWE-208
TI-2023-00345 CVE-2023-0361 · GHSA-5547-g9w2-52xj

Observable discrepancy in gnutls

Priority HIGH 68

A timing side-channel in the handling of RSA ClientKeyExchange messages was discovered in GnuTLS.

CVSS 3.1HIGH 7.4 Network No auth No interaction EPSS 0.01453 Published 2023-02-15 Partial fix CWE-203
TI-2021-03074 CVE-2021-4209 · GHSA-xj78-h3gx-cm6v

NULL pointer dereference in GnuTLS

Priority LOW 33

A NULL pointer dereference flaw was found in GnuTLS.

CVSS 3.1MEDIUM 6.5 Network Low privileges No interaction EPSS 0.01908 Published 2022-08-24 Will not fix CWE-476
TI-2022-02318 CVE-2022-2509 · GHSA-w33j-4mrg-pgc3

Double free in GnuTLS

Priority MEDIUM 43

A vulnerability found in gnutls.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.02269 Published 2022-08-01 Partial fix CWE-415
TI-2021-03527 CVE-2021-20232 · GHSA-p947-gfm7-f4g7

Use after free in gnutls

Priority MEDIUM 55

A flaw was found in gnutls.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.03377 Published 2021-03-12 Fixed CWE-416
TI-2021-03526 CVE-2021-20231 · GHSA-mqq9-xchh-h97q

Use after free in gnutls

Priority MEDIUM 48

A flaw was found in gnutls.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.03678 Published 2021-03-12 Fixed CWE-416
TI-2019-02841 CVE-2019-3829 · GHSA-mm54-95hq-f739

Use after free in gnutls

Priority HIGH 67

A vulnerability was found in gnutls versions from 3.5.8 before 3.6.7.

CVSS 3.0HIGH 7.5 Network No auth No interaction EPSS 0.59237 Published 2019-03-27 Fixed CWE-416
TI-2018-12078 CVE-2018-16868 · GHSA-qjx3-4wr5-3c93

Observable discrepancy in [UNKNOWN] gnutls

Priority LOW 26

A Bleichenbacher type side-channel based padding oracle attack was found in the way gnutls handles verification of RSA decrypted PKCS#1 v1.5 data.

CVSS 3.1MEDIUM 5.6 Physical Low privileges No interaction EPSS 0.00577 Published 2018-12-03 Will not fix CWE-203
Load more