Summary
It was discovered that GnuTLS incorrectly handled certain alerts when being
used with TLS 1.3 servers. A remote attacker could use this issue to cause
GnuTLS to crash, resulting in a denial of service, or possibly execute
arbitrary code.
Fixed packages 1
| Release | Package | Fixed in |
|---|---|---|
| Ubuntu · 20.04 LTS 20.04:LTS | gnutls28 | 3.6.13-2ubuntu1.3 |
Vulnerabilities 1
-
Unscored —
An issue was discovered in GnuTLS before 3.6.15. A server can trigger a NULL pointer dereference in a TLS 1.3 client if…
References
-
report
https://ubuntu.com/security/CVE-2020-24659