GN
Product
Gnutls
74
CVEs
0
On KEV
9.8
Max CVSS
0
New 30D
Severity mix
Critical 8High 20Medium 9Low 1
Watch
Add Gnutls to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2025-32990 | 8.2 | Jul 10 | A heap-buffer-overflow (off-by-one) flaw was found in the GnuTLS software in the template parsing logic within the certtool utility Affected: All versions, or not specified |
| CVE-2025-32988 | 8.2 | Jul 10 | Gnutls: vulnerability in gnutls othername san export Affected: before 3.8.10 |
| CVE-2026-42009 | 7.5 | May 18 | Gnutls: gnutls: denial of service via dtls packet reordering vulnerability Affected: All versions, or not specified |
| CVE-2026-1584 | 7.5 | Apr 9 | Gnutls: gnutls: remote denial of service via crafted clienthello with invalid psk binder Affected: All versions, or not specified |
| CVE-2024-0567 | 7.5 | Jan 16 | Gnutls: rejects certificate chain with distributed trust Affected: 3.7.0 before 3.8.3 |
| CVE-2024-0553 | 7.5 | Jan 16 | Gnutls: incomplete fix for cve-2023-5981 Affected: before 3.8.3 |
| CVE-2022-2509 | 7.5 | Aug 1 | A vulnerability found in gnutls Affected: before 3.7.7 |
| CVE-2020-24659 | 7.5 | Sep 4 | An issue was discovered in GnuTLS before 3.6.15 Affected: before 3.6.15 |
| CVE-2015-0294 | 7.5 | Jan 27 | GnuTLS before 3.3.13 does not validate that the signature algorithms match when importing a certificate Affected: before 3.3.13 |
| CVE-2019-3836 | 7.5 | Apr 1 | It was discovered in gnutls before version 3.6.7 upstream that there is an uninitialized pointer access in gnutls versions 3.6.3 or later which can be triggered by certain… Affected: 3.6.3 before 3.6.7 |
| CVE-2019-3829 | 7.5 | Mar 27 | A vulnerability was found in gnutls versions from 3.5.8 before 3.6.7 Affected: 3.5.8 before 3.6.7 |
| CVE-2016-4456 | 7.5 | Aug 8 | The "GNUTLS_KEYLOGFILE" environment variable in gnutls 3.4.12 allows remote attackers to overwrite and corrupt arbitrary files in the filesystem Affected: 3.4.12 |
| CVE-2017-7507 | 7.5 | Jun 16 | GnuTLS version 3.5.12 and earlier is vulnerable to a NULL pointer dereference while decoding a status response TLS extension with valid contents Affected: through 3.5.12 |
| CVE-2017-7869 | 7.5 | Apr 14 | GnuTLS before 2017-02-20 has an out-of-bounds write caused by an integer overflow and heap-based buffer overflow related to the cdk_pkt_read function in opencdk/read-packet.c Affected: through 3.5.9 |
| CVE-2017-5335 | 7.5 | Mar 24 | The stream reading functions in lib/opencdk/read-packet.c in GnuTLS before 3.3.26 and 3.5.x before 3.5.8 allow remote attackers to cause a denial of service (out-of-memory error… Affected: through 3.3.25; 3.5.0; 3.5.1; 3.5.2; 3.5.3; 3.5.4; +3 more |
| CVE-2016-7444 | 7.5 | Sep 27 | The gnutls_ocsp_resp_check_crt function in lib/x509/ocsp.c in GnuTLS before 3.4.15 and 3.5.x before 3.5.4 does not verify the serial length of an OCSP response, which might allow… Affected: through 3.4.14; 3.5.0; 3.5.1; 3.5.2; 3.5.3 |
| CVE-2026-3833 | 7.4 | Apr 30 | Gnutls: gnutls: policy bypass due to case-sensitive nameconstraints comparison Affected: All versions, or not specified |
| CVE-2023-0361 | 7.4 | Feb 15 | A timing side-channel in the handling of RSA ClientKeyExchange messages was discovered in GnuTLS Affected: 3.6.8-11.el8_2 |
| CVE-2020-13777 | 7.4 | Jun 4 | GnuTLS 3.6.x before 3.6.14 uses incorrect cryptography for encrypting a session ticket (a loss of confidentiality in TLS 1.2, and an authentication bypass in TLS 1.3) Affected: 3.6.0 before 3.6.14 |
| CVE-2020-11501 | 7.4 | Apr 3 | GnuTLS 3.6.x before 3.6.13 uses incorrect cryptography for DTLS Affected: 3.6.3 before 3.6.13 |
Showing 20