Summary
It was discovered that GnuTLS incorrectly handled sending certain
extensions when being used as a client. A remote attacker could use this
issue to cause GnuTLS to crash, resulting in a denial of service, or
possibly execute arbitrary code.
Fixed packages 1
| Release | Package | Fixed in |
|---|---|---|
| Ubuntu · 20.04 LTS 20.04:LTS | gnutls28 | 3.6.13-2ubuntu1.6 |
Vulnerabilities 2
-
Critical 9.8
A flaw was found in gnutls. A use after free issue in client_send_params in lib/ext/pre_shared_key.c may lead to memory…
-
Unscored —
A flaw was found in gnutls. A use after free issue in client sending key_share extension may lead to memory corruption …