GN
Product
Gnutls
74
CVEs
0
On KEV
9.8
Max CVSS
0
New 30D
Severity mix
Critical 8High 20Medium 9Low 1
Watch
Add Gnutls to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2026-42010 | 9.8 | May 7 | Gnutls: gnutls: authentication bypass via nul character in username Affected: All versions, or not specified |
| CVE-2021-20232 | 9.8 | Mar 12 | A flaw was found in gnutls Affected: 3.6.3 before 3.7.1 |
| CVE-2021-20231 | 9.8 | Mar 12 | A flaw was found in gnutls Affected: 3.6.3 before 3.7.1 |
| CVE-2017-5337 | 9.8 | Mar 24 | Multiple heap-based buffer overflows in the read_attribute function in GnuTLS before 3.3.26 and 3.5.x before 3.5.8 allow remote attackers to have unspecified impact via a crafted… Affected: through 3.3.25; 3.5.0; 3.5.1; 3.5.2; 3.5.3; 3.5.4; +3 more |
| CVE-2017-5336 | 9.8 | Mar 24 | Stack-based buffer overflow in the cdk_pk_get_keyid function in lib/opencdk/pubkey.c in GnuTLS before 3.3.26 and 3.5.x before 3.5.8 allows remote attackers to have unspecified… Affected: through 3.3.25; 3.5.0; 3.5.1; 3.5.2; 3.5.3; 3.5.4; +3 more |
| CVE-2017-5334 | 9.8 | Mar 24 | Double free vulnerability in the gnutls_x509_ext_import_proxy function in GnuTLS before 3.3.26 and 3.5.x before 3.5.8 allows remote attackers to have unspecified impact via… Affected: through 3.3.25; 3.5.0; 3.5.1; 3.5.2; 3.5.3; 3.5.4; +3 more |
| CVE-2009-3555 | 9.8 | Nov 9 | The TLS protocol, and the SSL protocol 3.0 and possibly earlier, as used in Microsoft Internet Information Services (IIS) 7.0, mod_ssl in the Apache HTTP Server 2.2.14 and… Affected: through 2.8.5 |
| CVE-2026-33845 | 9.1 | Apr 30 | Gnutls: gnutls: denial of service via dtls zero-length fragment Affected: All versions, or not specified |
| CVE-2025-32990 | 8.2 | Jul 10 | A heap-buffer-overflow (off-by-one) flaw was found in the GnuTLS software in the template parsing logic within the certtool utility Affected: All versions, or not specified |
| CVE-2025-32988 | 8.2 | Jul 10 | Gnutls: vulnerability in gnutls othername san export Affected: before 3.8.10 |
| CVE-2026-42009 | 7.5 | May 18 | Gnutls: gnutls: denial of service via dtls packet reordering vulnerability Affected: All versions, or not specified |
| CVE-2026-1584 | 7.5 | Apr 9 | Gnutls: gnutls: remote denial of service via crafted clienthello with invalid psk binder Affected: All versions, or not specified |
| CVE-2024-0567 | 7.5 | Jan 16 | Gnutls: rejects certificate chain with distributed trust Affected: 3.7.0 before 3.8.3 |
| CVE-2024-0553 | 7.5 | Jan 16 | Gnutls: incomplete fix for cve-2023-5981 Affected: before 3.8.3 |
| CVE-2022-2509 | 7.5 | Aug 1 | A vulnerability found in gnutls Affected: before 3.7.7 |
| CVE-2020-24659 | 7.5 | Sep 4 | An issue was discovered in GnuTLS before 3.6.15 Affected: before 3.6.15 |
| CVE-2015-0294 | 7.5 | Jan 27 | GnuTLS before 3.3.13 does not validate that the signature algorithms match when importing a certificate Affected: before 3.3.13 |
| CVE-2019-3836 | 7.5 | Apr 1 | It was discovered in gnutls before version 3.6.7 upstream that there is an uninitialized pointer access in gnutls versions 3.6.3 or later which can be triggered by certain… Affected: 3.6.3 before 3.6.7 |
| CVE-2019-3829 | 7.5 | Mar 27 | A vulnerability was found in gnutls versions from 3.5.8 before 3.6.7 Affected: 3.5.8 before 3.6.7 |
| CVE-2016-4456 | 7.5 | Aug 8 | The "GNUTLS_KEYLOGFILE" environment variable in gnutls 3.4.12 allows remote attackers to overwrite and corrupt arbitrary files in the filesystem Affected: 3.4.12 |
| CVE-2017-7507 | 7.5 | Jun 16 | GnuTLS version 3.5.12 and earlier is vulnerable to a NULL pointer dereference while decoding a status response TLS extension with valid contents Affected: through 3.5.12 |
| CVE-2017-7869 | 7.5 | Apr 14 | GnuTLS before 2017-02-20 has an out-of-bounds write caused by an integer overflow and heap-based buffer overflow related to the cdk_pkt_read function in opencdk/read-packet.c Affected: through 3.5.9 |
| CVE-2017-5335 | 7.5 | Mar 24 | The stream reading functions in lib/opencdk/read-packet.c in GnuTLS before 3.3.26 and 3.5.x before 3.5.8 allow remote attackers to cause a denial of service (out-of-memory error… Affected: through 3.3.25; 3.5.0; 3.5.1; 3.5.2; 3.5.3; 3.5.4; +3 more |
| CVE-2016-7444 | 7.5 | Sep 27 | The gnutls_ocsp_resp_check_crt function in lib/x509/ocsp.c in GnuTLS before 3.4.15 and 3.5.x before 3.5.4 does not verify the serial length of an OCSP response, which might allow… Affected: through 3.4.14; 3.5.0; 3.5.1; 3.5.2; 3.5.3 |
| CVE-2026-3833 | 7.4 | Apr 30 | Gnutls: gnutls: policy bypass due to case-sensitive nameconstraints comparison Affected: All versions, or not specified |
| CVE-2023-0361 | 7.4 | Feb 15 | A timing side-channel in the handling of RSA ClientKeyExchange messages was discovered in GnuTLS Affected: 3.6.8-11.el8_2 |
| CVE-2020-13777 | 7.4 | Jun 4 | GnuTLS 3.6.x before 3.6.14 uses incorrect cryptography for encrypting a session ticket (a loss of confidentiality in TLS 1.2, and an authentication bypass in TLS 1.3) Affected: 3.6.0 before 3.6.14 |
| CVE-2020-11501 | 7.4 | Apr 3 | GnuTLS 3.6.x before 3.6.13 uses incorrect cryptography for DTLS Affected: 3.6.3 before 3.6.13 |
| CVE-2021-4209 | 6.5 | Aug 24 | A NULL pointer dereference flaw was found in GnuTLS Affected: before 3.7.3 |
| CVE-2023-5981 | 5.9 | Nov 28 | Gnutls: timing side-channel in the rsa-psk authentication Affected: before 3.8.2 |
| CVE-2015-8313 | 5.9 | Dec 20 | GnuTLS incorrectly validates the first byte of padding in CBC modes Affected: 2.0.0 through 2.12.24 |
| CVE-2018-10844 | 5.9 | Aug 22 | It was found that the GnuTLS implementation of HMAC-SHA-256 was vulnerable to a Lucky thirteen style attack Affected: before 3.6.12 |
| CVE-2018-10845 | 5.9 | Aug 22 | It was found that the GnuTLS implementation of HMAC-SHA-384 was vulnerable to a Lucky thirteen style attack Affected: before 3.6.12 |
| CVE-2008-4989 | 5.9 | Nov 13 | The _gnutls_x509_verify_certificate function in lib/x509/verify.c in libgnutls in GnuTLS before 2.6.1 trusts certificate chains in which the last certificate is an arbitrary… Affected: before 2.6.1 |
| CVE-2018-16868 | 5.6 | Dec 3 | A Bleichenbacher type side-channel based padding oracle attack was found in the way gnutls handles verification of RSA decrypted PKCS#1 v1.5 data Affected: through 3.6.4 |
| CVE-2018-10846 | 5.6 | Aug 22 | A cache-based side channel in GnuTLS implementation that leads to plain text recovery in cross-VM attack setting was found Affected: before 3.6.12 |
| CVE-2025-32989 | 5.3 | Jul 10 | Gnutls: vulnerability in gnutls sct extension parsing Affected: All versions, or not specified |
| CVE-2026-3832 | 3.7 | Apr 30 | Gnutls: gnutls: security bypass allows acceptance of revoked server certificates via crafted ocsp response Affected: All versions, or not specified |
| CVE-2015-3308 | – | Sep 2 | Double free vulnerability in lib/x509/x509_ext.c in GnuTLS before 3.3.14 allows remote attackers to cause a denial of service or possibly have unspecified other impact via a… Affected: through 3.3.13 |
| CVE-2015-6251 | – | Aug 24 | Double free vulnerability in GnuTLS before 3.3.17 and 3.4.x before 3.4.4 allows remote attackers to cause a denial of service via a long DistinguishedName (DN) entry in a… Affected: 3.3.0; 3.3.0; 3.3.1; 3.3.2; 3.3.3; 3.3.4; +16 more |
| CVE-2014-8155 | – | Aug 14 | GnuTLS before 2.9.10 does not verify the activation and expiration dates of CA certificates, which allows man-in-the-middle attackers to spoof servers via a certificate issued by… Affected: through 2.9.9 |
| CVE-2015-0282 | – | Mar 24 | GnuTLS before 3.1.0 does not verify that the RSA PKCS #1 signature algorithm matches the signature algorithm in the certificate, which allows remote attackers to conduct downgrade… Affected: through 3.0.9 |
| CVE-2014-8564 | – | Nov 13 | The _gnutls_ecc_ansi_x963_export function in gnutls_ecc.c in GnuTLS 3.x before 3.1.28, 3.2.x before 3.2.20, and 3.3.x before 3.3.10 allows remote attackers to cause a denial of… Affected: 3.0; 3.0.0; 3.0.1; 3.0.2; 3.0.3; 3.0.4; +34 more |
| CVE-2014-3465 | – | Jun 10 | The gnutls_x509_dn_oid_name function in lib/x509/common.c in GnuTLS 3.0 before 3.1.20 and 3.2.x before 3.2.10 allows remote attackers to cause a denial of service (NULL pointer… Affected: 3.0.0; 3.0.1; 3.0.2; 3.0.3; 3.0.4; 3.0.5; +34 more |
| CVE-2014-3469 | – | Jun 5 | The (1) asn1_read_value_type and (2) asn1_read_value functions in GNU Libtasn1 before 3.6 allows context-dependent attackers to cause a denial of service (NULL pointer dereference… Affected: before 3.5.7 |
| CVE-2014-3468 | – | Jun 5 | The asn1_get_bit_der function in GNU Libtasn1 before 3.6 does not properly report an error when a negative bit length is identified, which allows context-dependent attackers to… Affected: before 3.5.7 |
| CVE-2014-3467 | – | Jun 5 | Multiple unspecified vulnerabilities in the DER decoder in GNU Libtasn1 before 3.6, as used in GnuTLS, allow remote attackers to cause a denial of service (out-of-bounds read) via… Affected: before 3.5.7 |
| CVE-2014-3466 | – | Jun 3 | Buffer overflow in the read_server_hello function in lib/gnutls_handshake.c in GnuTLS before 3.1.25, 3.2.x before 3.2.15, and 3.3.x before 3.3.4 allows remote servers to cause a… Affected: 3.3.0; 3.3.0; 3.3.1; 3.3.2; 3.3.3; through 3.1.24; +34 more |
| CVE-2014-1959 | – | Mar 7 | lib/x509/verify.c in GnuTLS before 3.1.21 and 3.2.x before 3.2.11 treats version 1 X.509 certificates as intermediate CAs, which allows remote attackers to bypass intended… Affected: through 3.1.20; 3.1.0; 3.1.1; 3.1.2; 3.1.3; 3.1.4; +27 more |
| CVE-2014-0092 | – | Mar 7 | lib/x509/verify.c in GnuTLS before 3.1.22 and 3.2.x before 3.2.12 does not properly handle unspecified errors when verifying X.509 certificates from SSL servers, which allows… Affected: through 3.2.11; 3.2.0; 3.2.1; 3.2.2; 3.2.3; 3.2.4; +29 more |