GN
Product
Gnutls
74
CVEs
0
On KEV
9.8
Max CVSS
0
New 30D
Severity mix
Critical 8High 20Medium 9Low 1
Watch
Add Gnutls to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2026-42010 | 9.8 | May 7 | Gnutls: gnutls: authentication bypass via nul character in username Affected: All versions, or not specified |
| CVE-2021-20232 | 9.8 | Mar 12 | A flaw was found in gnutls Affected: 3.6.3 before 3.7.1 |
| CVE-2021-20231 | 9.8 | Mar 12 | A flaw was found in gnutls Affected: 3.6.3 before 3.7.1 |
| CVE-2017-5337 | 9.8 | Mar 24 | Multiple heap-based buffer overflows in the read_attribute function in GnuTLS before 3.3.26 and 3.5.x before 3.5.8 allow remote attackers to have unspecified impact via a crafted… Affected: through 3.3.25; 3.5.0; 3.5.1; 3.5.2; 3.5.3; 3.5.4; +3 more |
| CVE-2017-5336 | 9.8 | Mar 24 | Stack-based buffer overflow in the cdk_pk_get_keyid function in lib/opencdk/pubkey.c in GnuTLS before 3.3.26 and 3.5.x before 3.5.8 allows remote attackers to have unspecified… Affected: through 3.3.25; 3.5.0; 3.5.1; 3.5.2; 3.5.3; 3.5.4; +3 more |
| CVE-2017-5334 | 9.8 | Mar 24 | Double free vulnerability in the gnutls_x509_ext_import_proxy function in GnuTLS before 3.3.26 and 3.5.x before 3.5.8 allows remote attackers to have unspecified impact via… Affected: through 3.3.25; 3.5.0; 3.5.1; 3.5.2; 3.5.3; 3.5.4; +3 more |
| CVE-2009-3555 | 9.8 | Nov 9 | The TLS protocol, and the SSL protocol 3.0 and possibly earlier, as used in Microsoft Internet Information Services (IIS) 7.0, mod_ssl in the Apache HTTP Server 2.2.14 and… Affected: through 2.8.5 |
| CVE-2026-33845 | 9.1 | Apr 30 | Gnutls: gnutls: denial of service via dtls zero-length fragment Affected: All versions, or not specified |
Showing 8