Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

4 records

Priority MEDIUM 43

A heap-buffer-overflow (off-by-one) flaw was found in the GnuTLS software in the template parsing logic within the certtool utility.

CVSS 3.1HIGH 8.2 Network No auth No interaction EPSS 0.00896 Published 2025-07-10 Partial fix · 3.8.10, 3.8.9-9.el10_0.14 +8 CWE-122
Priority LOW 27

A heap-buffer-overread vulnerability was found in GnuTLS in how it handles the Certificate Transparency (CT) Signed Certificate Timestamp (SCT) extension during X.509 certificate parsing.

CVSS 3.1MEDIUM 5.3 Network No auth No interaction EPSS 0.01467 Published 2025-07-10 Partial fix · 3.8.10, 3.8.9-9.el10_0.14 +7 CWE-295