GNU / Gnutls
74 CVEs
| CVE ID | Description | Severity | CVSS | Published |
|---|---|---|---|---|
| CVE-2026-42009 | Gnutls: gnutls: denial of service via dtls packet reordering vulnerability | HIGH | 7.5 | May 18, 2026 |
| CVE-2026-42010 | Gnutls: gnutls: authentication bypass via nul character in username | CRITICAL | 9.8 | May 7, 2026 |
| CVE-2026-33845 | Gnutls: gnutls: denial of service via dtls zero-length fragment | CRITICAL | 9.1 | Apr 30, 2026 |
| CVE-2026-3832 | Gnutls: gnutls: security bypass allows acceptance of revoked server certificates via crafted ocsp response | LOW | 3.7 | Apr 30, 2026 |
| CVE-2026-3833 | Gnutls: gnutls: policy bypass due to case-sensitive nameconstraints comparison | HIGH | 7.4 | Apr 30, 2026 |
| CVE-2026-1584 | Gnutls: gnutls: remote denial of service via crafted clienthello with invalid psk binder | HIGH | 7.5 | Apr 9, 2026 |
| CVE-2025-32990 | Gnutls: vulnerability in gnutls certtool template parsing | HIGH | 8.2 | Jul 10, 2025 |
| CVE-2025-32989 | Gnutls: vulnerability in gnutls sct extension parsing | MEDIUM | 5.3 | Jul 10, 2025 |
| CVE-2025-32988 | Gnutls: vulnerability in gnutls othername san export | HIGH | 8.2 | Jul 10, 2025 |
| CVE-2024-0567 | Gnutls: rejects certificate chain with distributed trust | HIGH | 7.5 | Jan 16, 2024 |
| CVE-2024-0553 | Gnutls: incomplete fix for cve-2023-5981 | HIGH | 7.5 | Jan 16, 2024 |
| CVE-2023-5981 | Gnutls: timing side-channel in the rsa-psk authentication | MEDIUM | 5.9 | Nov 28, 2023 |
| CVE-2023-0361 | gnutls: timing side-channel in the TLS RSA key exchange code | HIGH | 7.4 | Feb 15, 2023 |
| CVE-2021-4209 | GnuTLS: Null pointer dereference in MD_UPDATE | MEDIUM | 6.5 | Aug 24, 2022 |
| CVE-2022-2509 | gnutls: Double free during gnutls_pkcs7_verify | HIGH | 7.5 | Aug 1, 2022 |
| CVE-2021-20232 | gnutls: Use after free in client_send_params in lib/ext/pre_shared_key.c | CRITICAL | 9.8 | Mar 12, 2021 |
| CVE-2021-20231 | gnutls: Use after free in client key_share extension | CRITICAL | 9.8 | Mar 12, 2021 |
| CVE-2020-24659 | gnutls: Heap buffer overflow in handshake with no_renegotiation alert sent | HIGH | 7.5 | Sep 4, 2020 |
| CVE-2020-13777 | gnutls: session resumption works without master key allowing MITM | HIGH | 7.4 | Jun 4, 2020 |
| CVE-2020-11501 | gnutls: DTLS client hello contains a random value of all zeroes | HIGH | 7.4 | Apr 3, 2020 |
| CVE-2015-0294 | gnutls: certificate algorithm consistency checking issue | HIGH | 7.5 | Jan 27, 2020 |
| CVE-2015-8313 | gnutls: First byte of the padding in CBC mode is not checked | MEDIUM | 5.9 | Dec 20, 2019 |
| CVE-2019-3836 | gnutls: invalid pointer access upon receiving async handshake messages | HIGH | 7.5 | Apr 1, 2019 |
| CVE-2019-3829 | gnutls: use-after-free/double-free in certificate verification | HIGH | 7.5 | Mar 27, 2019 |
| CVE-2018-16868 | gnutls: Bleichenbacher-like side channel leakage in PKCS#1 v1.5 verification and padding oracle verification | MEDIUM | 5.6 | Dec 3, 2018 |
Showing 1 to 25 of 74 CVEs