GN
Product
Gnutls
74
CVEs
0
On KEV
9.8
Max CVSS
0
New 30D
Severity mix
Critical 8High 20Medium 9Low 1
Watch
Add Gnutls to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2021-4209 | 6.5 | Aug 24 | A NULL pointer dereference flaw was found in GnuTLS Affected: before 3.7.3 |
| CVE-2023-5981 | 5.9 | Nov 28 | Gnutls: timing side-channel in the rsa-psk authentication Affected: before 3.8.2 |
| CVE-2015-8313 | 5.9 | Dec 20 | GnuTLS incorrectly validates the first byte of padding in CBC modes Affected: 2.0.0 through 2.12.24 |
| CVE-2018-10844 | 5.9 | Aug 22 | It was found that the GnuTLS implementation of HMAC-SHA-256 was vulnerable to a Lucky thirteen style attack Affected: before 3.6.12 |
| CVE-2018-10845 | 5.9 | Aug 22 | It was found that the GnuTLS implementation of HMAC-SHA-384 was vulnerable to a Lucky thirteen style attack Affected: before 3.6.12 |
| CVE-2008-4989 | 5.9 | Nov 13 | The _gnutls_x509_verify_certificate function in lib/x509/verify.c in libgnutls in GnuTLS before 2.6.1 trusts certificate chains in which the last certificate is an arbitrary… Affected: before 2.6.1 |
| CVE-2018-16868 | 5.6 | Dec 3 | A Bleichenbacher type side-channel based padding oracle attack was found in the way gnutls handles verification of RSA decrypted PKCS#1 v1.5 data Affected: through 3.6.4 |
| CVE-2018-10846 | 5.6 | Aug 22 | A cache-based side channel in GnuTLS implementation that leads to plain text recovery in cross-VM attack setting was found Affected: before 3.6.12 |
| CVE-2025-32989 | 5.3 | Jul 10 | Gnutls: vulnerability in gnutls sct extension parsing Affected: All versions, or not specified |
Showing 9