Summary
It was discovered that GnuTLS incorrectly handled certain memory
operations. A remote attacker could possibly use this issue to cause GnuTLS
to crash, resulting in a denial of service.
Fixed packages 1
| Release | Package | Fixed in |
|---|---|---|
| Ubuntu · Pro 16.04 LTS Pro:16.04:LTS | gnutls28 | 3.4.10-4ubuntu1.9+esm1 |
Vulnerabilities 1
-
Unscored —
A NULL pointer dereference flaw was found in GnuTLS. As Nettle's hash update functions internally call memcpy, providin…
References
-
report
https://ubuntu.com/security/CVE-2021-4209