Fluid Attacks Database

Description

A NULL pointer dereference flaw was found in the GnuTLS software in _gnutls_figure_common_ciphersuite().

Mitigation

Update Impact

Minimal update. May introduce new vulnerabilities or breaking changes.

Ecosystem	Component	Affected version	Patched versions
debian 14	gnutls28	>=0 <3.8.9-3	3.8.9-3
debian 13	gnutls28	>=0 <3.8.9-3	3.8.9-3
debian 11	gnutls28	=3.7.1-5 \|\| =3.7.1-5+deb11u1 \|\| =3.7.1-5+deb11u2 \|\| =3.7.1-5+deb11u3 \|\| =3.7.1-5+deb11u4 \|\| =3.7.1-5+deb11u5 \|\| =3.7.1-5+deb11u6 \|\| =3.7.1-5+deb11u7 \|\| >=0 <3.7.1-5+deb11u8	3.7.1-5+deb11u8
debian 12	gnutls28	=3.7.9-2 \|\| =3.7.9-2+deb12u1 \|\| =3.7.9-2+deb12u2 \|\| =3.7.9-2+deb12u3 \|\| =3.7.9-2+deb12u4 \|\| >=0 <3.7.9-2+deb12u5	3.7.9-2+deb12u5
alpine v3.23	gnutls	>=0 <3.8.11-r0	3.8.11-r0
alpine v3.20	gnutls	>=0 <3.8.12-r0	3.8.12-r0
alpine v3.21	gnutls	>=0 <3.8.12-r0	3.8.12-r0
alpine v3.22	gnutls	>=0 <3.8.12-r0	3.8.12-r0
rpm rhel7	gnutls	-	-
rpm rhel10	gnutls	<0:3.8.9-9.el10_0.14	0:3.8.9-9.el10_0.14

1-10 of 15

Aliases

Does your application use this vulnerable software?

During the free trial, our tools assess your application, identify vulnerabilities, and provide recommendations for their remediation.